Subprocessors
HS2C, Inc. · Applies to all HS2C, Inc. services, including HS2C and CateLMS
· Last updated: August 28, 2026
HS2C, Inc. uses a small number of third-party subprocessors to operate its services.
Each subprocessor is bound by a written agreement requiring protections for Student
Data no less stringent than our student data privacy agreements, and none is
permitted to sell Student Data. This page is maintained pursuant to our data privacy
agreements (including the Utah NDPA, Exhibit G) and Utah Code §53E-9-309.
| Subprocessor | Purpose | Student Data access | Location |
|---|---|---|---|
| Cloudways Ltd. a DigitalOcean Holdings, Inc. company |
Managed application hosting for the HS2C / CateLMS platform | Hosts the application and its database (Student Data encrypted at rest for sensitive fields) | United States |
| DigitalOcean, LLC infrastructure underlying Cloudways |
Cloud infrastructure (servers, storage) provisioned through Cloudways | Infrastructure-level storage of the hosted application | United States |
| Anthropic, PBC | AI processing for optional assistance features (e.g., writing feedback, lesson differentiation, translated family summaries) | Receives only the content required for each feature, with student names removed or replaced with tokens before transmission. Data submitted via our API integration is not used to train Anthropic’s models. AI is never used to generate grade or attendance data. | United States |
| Mailgun Technologies, Inc. a Sinch AB company (“Sinch Email”) |
Email delivery (account, family, and product email) | Processes recipient email addresses and message content in transit (e.g., family-portal notifications) | United States |
| Stripe, Inc. | Subscription billing and payment processing | None. Processes purchaser (teacher/school) payment information only; no Student Data. | United States |
Notes for reviewers
- Voice features: dictation (grades, attendance, notes) is transcribed by the teacher’s own browser using the browser’s built-in speech recognition. HS2C, Inc. never receives, stores, or transmits audio — only the resulting text. Depending on the browser, the browser vendor may process audio to provide its transcription feature; that processing is a function of the user’s browser, not of HS2C’s services.
- Public data sources: college and program information is retrieved from the U.S. Department of Education College Scorecard public API. No Student Data is transmitted to it.
- Changes: we notify contracted LEAs of subprocessor additions in accordance with our data privacy agreements. Questions: privacy@catelms.com.