Security and data protection

Sub-processors

The services that process personal data for Viafocus: what each one does, where the data lives, and how any transfer outside the EEA is covered.

Version 1.2 · Last updated 15 October 2026 · 10 sub-processors

Controller

The school

Processor

Viafocus AB

Sub-processors

The services below

Sub-processors used by Viafocus
VendorWhat it does for usWhere the data livesLeaves the EEALegal mechanism
NeonDatabase. Holds all pupil records.Germany, EUNoNone needed
RailwayApplication servers and live data for lessons in progress.Netherlands, EUYes · US companySCC
CloudflareFile storage for lessons and uploaded files. Traffic to Viafocus goes through Cloudflare's network. Screenshots are not stored.EuropeYes · US company, global networkDPF
VercelServes the website and the web app. Server functions run in Stockholm. Measures page load times, only with consent.Stockholm, EUYes · US company, global networkDPF
LettermintSends our email.EUNoNone needed
Microsoft AzureAll AI in the services, for both teachers' material and pupil data.EUNoNone needed
QdrantSearch index for lesson material teachers upload.EUNoNone needed
LangfuseTraces AI answers so we can check their quality.Frankfurt, EUNoNone needed
StripeCard payments, for example individual teachers' subscriptions. Schools are invoiced by Viafocus directly.Ireland, EU, and USAYesDPF
PostHogProduct and website analytics.Frankfurt, EUNoNone needed

Sign-in runs on our own systems.

We keep accounts and sessions ourselves, in our own database in the EU. Pupils and teachers can sign in with the school’s Google or Microsoft account, under the school’s own agreement with them.

Change history

  1. 15 October 2026 · Version 1.2

    Railway, Cloudflare and Vercel are US companies and are now listed as transfers outside the EEA. Railway is covered by Standard Contractual Clauses (SCCs), Cloudflare and Vercel by the Data Privacy Framework (DPF). The servers and the data stay where they were.

You sign with

Viafocus AB

Org. number

559547-4882

Based in

Göteborg, Sweden

Data protection contact

Adam Almasri, CEO · dataskydd@viafocus.net

Request the DPASecurity and data protection