The Whispr EDU product only
Other BackPR products have their own sub-processor lists.
Trust Center
Sub-processors used by the Whispr EDU product
This page lists the current sub-processors. It is informational. We may change sub-processors. The signed agreement governs the customer's notice and objection rights.
At our sole discretion, with notice as the signed DPA requires
We pick sub-processors based on operational need and risk profile.
Lists evolve
The current list at the time of reading is authoritative for this page.
Whispr EDU sub-processors are separate from those of other Whispr products
Whispr EDU is one of multiple distinct product lines under the BackPR umbrella (backpr.com). Each Whispr product is operated by a separate team and may use a different sub-processor footprint. The Whispr Compliance Italy product at whispr.backpr.com publishes its own sub-processor list.
Providers currently used for the hosted Whispr EDU service
Provider
Primary role
Typical data involved
ProviderCloudflare
Primary roleHosted application infrastructure, storage, queues, custom domains
Typical data involvedApplication data, configuration, case data, audit records, operational traffic
ProviderResend
Primary roleTransactional email delivery
Typical data involvedEmail addresses, notification content, delivery metadata
ProviderStripe
Primary roleBilling and payment processing
Typical data involvedCommercial and payment-related data, only where billing functionality is used
How to read this list
- The list is current at time of publication and may change.
- Customer-initiated integrations with third-party tools (analytics, ticketing, SSO, identity providers, etc.) are not Whispr sub-processors and are governed by the customer's own contracts with those vendors.
- Internet service providers, transit carriers, and similar shared infrastructure are not listed as sub-processors.
Updates to this list are at our discretion
We may add, remove, or change sub-processors at any time. Where required by the signed DPA, we will provide reasonable advance notice through a method we determine. The customer's sole remedy for objection is the remedy in the signed DPA, if any. Absent a signed DPA addressing the point, no objection right is granted, and continued use of the product after a change constitutes acceptance.
What this page is not
This page does not: (i) constitute a representation about a sub-processor's certifications, audits, or security posture; (ii) commit Whispr to using any specific sub-processor; (iii) create any third-party-beneficiary relationship between the customer and a sub-processor; (iv) substitute for the signed DPA.