Subprocessor transparency for payments, email, support, and optional payment redirects.
Review the baseline commitments, controls, and evidence relevant to this trust topic.
Stripe
Handles payment metadata and card processing; SchoolBanks states it does not store full card numbers.
Microsoft 365 Graph API
Used for notifications, resets, and invites through OAuth-secured Graph API.
Zoho Desk
Used for support portal and ticketing without direct database access.
Vendor management
The DPA states subprocessors are contractually bound to obligations consistent with the DPA.