This appendix forms part of the Brain-Shot Academy privacy hub.
Privacy hub documents: Main Privacy Notice, Cookie Policy, Cookie Inventory, Processor Appendix, International Transfers Appendix, Retention Appendix, Legal Bases Matrix, and Required and Optional Data Matrix.
It identifies the principal service providers and processors currently used across the Brain-Shot Academy platform.
Principal processors currently in use
| Processor / service | Role in our platform |
|---|---|
| Google LLC (Google Cloud) | Hosting, infrastructure, backend workloads, Google Cloud Storage asset delivery, and related internal platform systems |
| Supabase, Inc. | Authentication, session handling, related backend data services, and shared database-backed service functions |
| Amazon Web Services, Inc. (AWS) | Email-delivery-related infrastructure and, in some cases, hosting or infrastructure services |
| Hostpoint AG | Email, related communications services, and hosting or infrastructure services for relevant Brain-Shot Academy services |
| BunnyWay d.o.o. (bunny.net) | Content delivery, caching, streaming delivery, and protected media delivery |
| Mux, Inc. | Video streaming, playback, playback analytics, media ingest, and protected media delivery |
Intuition Machines, Inc. (hCaptcha) | Anti-abuse and challenge-response protection for relevant account-related flows where configured |
FingerprintJS Inc. (Fingerprint) | Device intelligence, visitor identification, and fraud-prevention support for relevant anti-abuse, commerce, and account-protection flows where configured |
| HubSpot Germany GmbH | CRM, lead capture, contact management, segmentation, marketing communication, and related workflow automation |
| Zoom Communications, Inc. | Webinar, meeting, event participation, attendance administration, and related communication delivery |
| EvolMind S.L. | Learning management platform services for the legacy campus at campus.brain-shot.ch, including its separate learner account, authentication, enrolment, access, participation, progress, and completion handling where applicable |
| Stripe Payments Europe, Limited (and, where regulated payment services apply, Stripe Technology Europe, Limited) | Payment processing, checkout, transaction administration, refunds, fraud-prevention support, and related payment operations where applicable |
Recipient categories
Where necessary and lawful, we may also share personal data with providers of:
- cloud hosting and application infrastructure
- authentication and identity services
- database and backend services
- anti-abuse or challenge services
- CRM and marketing automation services
- webinar, event, and communications delivery services
- learning management platform services
- email and communications delivery
- content delivery and caching
- media streaming, playback analytics, downloads, and protected media delivery
- scheduling, booking, invoicing, accounting, payment processing, legal, and other professional services
- security, monitoring, logging, and operational tooling
Internal cross-service platforms
Some Brain-Shot Academy services also interact with other Brain-Shot Academy-operated services, such as the shared account service or other Brain-Shot Academy-operated components. These are part of the Brain-Shot Academy platform and are not listed here as third-party processors.
Updates to this appendix
We may update this appendix from time to time as our processor landscape changes.