Effective 8 September 2026
Sub-processors
Services outside Litly that process school data:
| Sub-processor | Service | Where it runs | What it touches |
|---|---|---|---|
| Amazon Web Services | Hosting, database, file storage | ca-central-1 (Canada) |
All stored data, at rest and in flight |
| Amazon Web Services | Bedrock — model inference | ca-central-1, us-east-1/2, us-west-2 |
The prompt: draft, assignment, rubric, learning profile, thread |
| Amazon Web Services | SES — email | ca-central-1 (Canada) |
Recipient addresses and the messages sent to staff and guardians |
Amazon Web Services is the only sub-processor.
Services not used#
No analytics provider. No error-reporting or session-replay service. No advertising network or ad identifiers. No customer-support widget. No content delivery network in front of the application beyond AWS.
This website loads no JavaScript, sets no cookies and makes no third-party requests.
Model training and retention#
AWS states that it does not use inputs or outputs to train models or share them with model providers. The current AWS statement is available on request.
The Litly AWS account is configured for zero data retention on Bedrock, so prompts and responses are not written to durable storage.
For child sexual abuse material detection, Bedrock applies automated classifiers to inputs and outputs. AWS may retain and review content flagged by these systems to meet reporting obligations. This safety process is not disabled by the zero-retention setting.
Changes#
Changes to this list are published here. Boards under agreement are notified before a new sub-processor begins processing.