EDUCERT (PTY) LTD ("EDUCERT", "we", "us", or "our") uses the service providers listed on this page to support delivery of the EDUCERT website at educert.co.za and the EDUCERT platform at app.educert.co.za.
This page should be read with our Privacy Policy and Terms of Service. Where EDUCERT processes personal information on behalf of a customer, additional operator or data processing terms may apply under a separate agreement. [TODO — legal review: confirm DPA / operator agreement status for each provider and whether this page should distinguish Website-only vs Platform providers.]
1. Current service providers
The table below describes the providers currently in use and their high-level role. Provider names link to their public websites for further information.
ZeptoMail
- Role: Transactional email delivery, including verification one-time passcode ("OTP") emails, contact form notifications, and other service-related messages.
- Typical data processed: Recipient email address, message content required to deliver the email, and standard email delivery metadata.
- Website: zoho.com/zeptomail
Clerk
- Role: User authentication and session management for Platform accounts.
- Typical data processed: Account identity information, authentication events, and session/security data required for login.
- Website: clerk.com
Vercel
- Role: Application hosting and deployment for the Platform.
- Typical data processed: Request metadata, application traffic, and operational logs needed to serve the Platform.
- Website: vercel.com
Railway
- Role: Infrastructure hosting for Platform application services and related runtime components.
- Typical data processed: Application traffic, deployment metadata, and operational logs needed to run hosted services.
- Website: railway.com
Neon (Postgres)
- Role: Managed PostgreSQL database hosting for Platform application data, including certificate records, verification rate-limit counters, and audit metadata.
- Typical data processed: Data stored in the Platform database according to product functionality and customer configuration.
- Website: neon.tech
Cloudflare R2
- Role: Object storage for files and assets used by the Platform, such as uploaded documents, generated outputs, and related stored objects.
- Typical data processed: Stored file content and associated storage metadata.
- Website: cloudflare.com/products/r2
Trigger.dev
- Role: Background job and workflow execution for asynchronous Platform tasks.
- Typical data processed: Job payloads and execution metadata required to run scheduled or event-driven workflows.
- Website: trigger.dev
2. Website infrastructure and analytics
The marketing Website is deployed on Cloudflare Pages. Cloudflare may process request metadata and provide security or delivery functions for the Website. [TODO — legal review: confirm whether Cloudflare Pages should be listed separately from Cloudflare R2 and document processing locations.]
Meta (Meta Pixel)
- Role: Website analytics and advertising measurement on educert.co.za through Meta Pixel.
- Typical data processed: Page views, browser and device information, IP address, referral source, visit timestamps, and related event data used to measure Website performance and advertising effectiveness on Meta platforms.
- Scope: Marketing Website only. Meta Pixel is not used on app.educert.co.za for Platform accounts, certificate verification, or customer certificate record workflows.
- Pixel identifiers:
3983035091826932,997478059860010 - Website: facebook.com/business/tools/meta-pixel
- Privacy information: facebook.com/privacy/policy
Cookie details associated with Meta Pixel are described in our Cookie Policy.
3. Cross-border processing
Some service providers may process or store information outside South Africa. Where personal information is transferred across borders, EDUCERT takes reasonable steps required by POPIA and applicable law, which may include contractual safeguards. [TODO — legal review: publish processing locations or a cross-border transfer summary per provider where required for customer diligence.]
4. Changes to this list
We may update this page when we add, replace, or remove service providers, or when provider roles change materially. The "Last updated" date at the top of this page indicates when the list was last revised.
Enterprise customers requiring advance notice of sub-processor changes should contact us to discuss contractual arrangements. [TODO — legal review: confirm notice period and process for enterprise sub-processor changes.]
5. Contact us
For questions about service providers, operator processing, or data protection due diligence:
- EDUCERT (PTY) LTD (Registration No. 2013/155188/07)
- Email: admin@educert.co.za
- Website: educert.co.za/contact.html