SIMPLIFY HCS LIMITED (trading as Thwok) uses these organisations to process personal data on its behalf. An academy with a signed data processing agreement gets 30 days' written notice before any addition or replacement, and may object (agreement clause 6).
Google Cloud EMEA Ltd (Google Cloud / Firebase)
| |
|---|
| Purpose | Database, authentication, file storage, serverless functions, hosting |
| Data | All platform data |
| Location | UK — London (europe-west2). Authentication metadata may be processed in the EU/US per Google's regional configuration. |
| Safeguard | Google Cloud Data Processing Addendum; UK Addendum to the EU SCCs for any non-UK processing; ISO 27001, SOC 2 |
| Listed since | 12 September 2026 |
Stripe Payments Europe Ltd / Stripe Payments UK Ltd
| |
|---|
| Purpose | Card payments, payouts to the academy |
| Data | Guardian name, email, card (tokenised — never held by Thwok), transaction amounts |
| Location | EU/UK, with US processing under Stripe's DPA |
| Safeguard | Stripe DPA with UK Addendum; PCI-DSS Level 1; FCA-authorised |
| Listed since | 12 September 2026 |
Anthropic (Claude)
| |
|---|
| Purpose | Drafts replies to parent enquiries and summarises free text for staff review — a person approves every output before it is used |
| Data | Enquiry text only; no pupil register data, no medical notes; inputs are not used to train models and are not retained beyond the request |
| Location | US |
| Safeguard | Anthropic Commercial Terms and DPA with UK Addendum / IDTA; zero-retention configuration |
| Listed since | 12 September 2026 |
Zoho Corporation B.V.
| |
|---|
| Purpose | Delivers invitations, confirmations and receipts by email (SMTP) |
| Data | Name, email address, message content |
| Location | EU — Netherlands (smtp.zoho.eu) |
| Safeguard | Zoho Data Processing Addendum with UK Addendum to the EU SCCs; ISO 27001, SOC 2 |
| Listed since | 12 September 2026 |
Google Cloud / Firebase Authentication
| |
|---|
| Purpose | Sends the one-time codes that verify a guardian's phone |
| Data | Mobile number, six-digit code |
| Location | Processed by Google under its regional configuration |
| Safeguard | Covered by the Google Cloud Data Processing Addendum above |
| Listed since | 12 September 2026 |
Also worth reading: the data protection pack for academies
SIMPLIFY HCS LIMITED trading as Thwok · Company 13667511 · ICO ZB235652 · 4 Henley Gardens, Pinner, HA5 2DE, England