Authorized Subprocessors
A comprehensive, transparent list of third-party vendors and infrastructure providers engaged by Infinity Learning to process platform data.
Last updated: 09 Nov 2026 · In effect for all schools, partners, and users
1. About Our Subprocessors
Infinity Learning ("we", "us", "the Platform") partners with industry-leading infrastructure and software providers to ensure high availability, data redundancy, and operational security. Each subprocessor is vetted against strict data protection benchmarks (including India DPDP Act 2023, ISO 27001, and SOC 2 compliance).
Subprocessors are granted access only to the minimum data strictly necessary to fulfill their respective infrastructure functions and are contractually prohibited from using platform data for any independent commercial or secondary AI training purpose.
2. Core Infrastructure & Hosting Partners
| Entity Name | Purpose / Role | Data Processing Location | Applicable Security Safeguards |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Compute (EC2), Web Server (Nginx 1.30), Encrypted Persistent Storage (EBS) | Mumbai, India (ap-south-1) | ISO 27001, SOC 1/2/3, PCI-DSS, In-region Data Residency |
| MariaDB Enterprise Stack | Relational Database Storage, User Auth (Argon2id), Student Academic Records, ERP | Mumbai, India (Self-Hosted on Dedicated Cloud Node) | At-Rest & In-Transit Encryption, Daily Automated Backups |
| Upstash Redis | Stateless session caching, rate limiting, and real-time socket acceleration | AWS Mumbai low-latency cluster | TLS 1.3 encrypted transport, zero persistent PII storage |
| Hostinger Business Email | Transactional Email Delivery (Account verification, login OTPs, fee receipts, alerts) | Global Secure Data Centers | Enforced SPF, DKIM, DMARC, TLS 1.3 SMTP authentication |
3. Third-Party Software & Client-Side Audits
Infinity Learning maintains a strict zero cross-site tracking policy:
- No Advertising SDKs: We do NOT embed Meta Pixel, TikTok Pixel, Google Ads remarketing, or third-party behavioral cookie trackers.
- No Data Harvesting: We do NOT sell, lease, or monetize educational analytics or behavioral student profiles.
- Public Site Chatbot: The conversational support agent hosted via AI Auto Agent operates only on public, unauthenticated platform information. No logged-in student academic records, exam scores, or parent banking details are ever transmitted to this service.
4. Subprocessor Updates & Notifications
We periodically update this schedule when infrastructure enhancements require onboarding new audited providers. School administrators enrolled under our Data Processing Agreement (DPA) will receive prior written notice via registered administrative email.
For questions regarding vendor risk management, contact our security office at info@infintylearning.net.