Third-party service providers
Last reviewed: [PLACEHOLDER: review date]
Ember Education Pty Ltd (ACN 693 296 409) engages a small number of third-party service providers that assist us to operate Lantern and our business. We do not sell personal information. We take reasonable steps to ensure that our service providers handle personal information appropriately and in accordance with applicable privacy requirements.
Student report content is intended to be hosted and processed within Australia, subject to the operation of our service-provider arrangements. Some of our service providers may process or access information outside Australia — for example, user authentication services may involve overseas processing of teacher login information, and payment providers may process billing information overseas. Where personal information is disclosed overseas, we take reasonable steps to ensure that it is handled consistently with the Australian Privacy Principles.
We do not use student information to train third-party AI models. For the full picture of how we handle personal information, see our Privacy Policy.
Current service providers
The table below lists the third-party service providers that assist us to operate Lantern, the purpose for which they are engaged, and where that processing takes place.
| Provider | Purpose | Data location / region |
|---|---|---|
| Amazon Web Services (AWS) | Hosting and cloud infrastructure. | Australia — Sydney (ap-southeast-2), with disaster recovery in Melbourne (ap-southeast-4). |
| Google Vertex AI | AI-assisted report drafting. A teacher always reviews and approves AI-generated report content before it is used. | Australia (australia-southeast1). |
| Google and Microsoft | User authentication and single sign-on services. | May involve overseas processing of teacher login information. |
| Stripe | Payment processing and billing. | May process billing information overseas. |
| [PLACEHOLDER: transactional email provider] | Sending transactional and account email such as sign-in links, notifications and service messages. | [PLACEHOLDER: transactional email provider data region] |
| [PLACEHOLDER: error monitoring / analytics provider] | Application error monitoring and product analytics to keep Lantern reliable. Configured to minimise and de-identify personal data wherever possible. | [PLACEHOLDER: error monitoring / analytics provider data region] |
Data deletion
Where a school ceases using Lantern, we will provide an opportunity to retrieve relevant data before deleting it in accordance with our retention practices. Information may remain in secure backup systems for a limited period before being permanently deleted.
Our service providers may take additional time to complete deletion within their own systems. For example, Google’s framework contemplates deletion periods of up to 180 days in some circumstances, and AWS permits retrieval and deletion activities for up to 90 days following termination.
Changes to this list
We may add or replace service providers as Lantern evolves. When we make a material change to this list, we will update this page and notify schools of material changes that affect privacy, security, student information or the notices and consents required for use of Lantern.
To be notified of changes to our service providers, you can subscribe via [PLACEHOLDER: change-notification subscription mechanism]. You can also email privacy@embereducation.com.au and we will add you to the notification list.
Questions
If you have questions about our service providers, the data they handle, or where it is stored, please contact our privacy team at privacy@embereducation.com.au.