Current subprocessors
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, edge delivery, database, DDoS protection | All Rally data at rest and in transit; request metadata including IP addresses | United States |
| Cloudflare, Inc. (Workers AI) | Answers questions typed into the help bubble on teacher pages | The text a teacher types into the help bubble. Never anything from a game, a question set or a student | United States |
| Brevo (Sendinblue SAS) | Email delivery for help bubble problem reports and the /districts request form | A teacher's or requester's name and email address, what they wrote, and for a problem report the errors recorded on that teacher page. Never anything about a student | France (EU) |
That is the entire list. Rally uses no analytics provider and no advertising network. The only AI involved is Cloudflare's, and only in the help bubble a teacher chooses to type into. No student's browser ever loads the help bubble, and nothing a student does reaches any provider but Cloudflare's hosting.
Names a teacher adds for grading reach no provider at all, Cloudflare included. They are kept in the teacher's own browser and never sent to Rally, so there is nothing for a subprocessor to process.
Google Fonts is not on this table either. Rally's server fetches the font files once and serves them from Rally's own address, with no information about any visitor attached, so no student's or teacher's browser ever contacts Google.
Kahoot is deliberately not on this table, and Blooket is not on it because Rally never contacts Blooket. A subprocessor is a party that handles data on our behalf, and neither does. When an administrator imports from a Kahoot link, Rally asks Kahoot for a public set by its identifier and receives the questions back; nothing about a teacher, a school or a student is sent, and Kahoot is given nothing to process, store or act on. It is a read, in the same direction a browser reads a public page.
Related SentinelGrid systems
Teacher sign-in is handled by the SentinelGrid portal, which is operated by SentinelGrid on the same infrastructure. It is not a third party. The portal passes Rally a teacher's email address, name, organisation and role; it passes nothing about students, because it has nothing about students.
The deployment request form at /districts is for adults asking for their own Rally. Rally stores nothing from it: it forwards what was typed to SentinelGrid's own sales records, and the confirmation email to the person who asked, and the notice to our team, are sent through Brevo (Sendinblue SAS, France), our email delivery provider. Nothing from a game, a question set or a student ever goes there.
The help bubble on the teacher console, /guide and /districts is SentinelGrid's support desk, operated by SentinelGrid on the same infrastructure. It is not part of Rally and is never loaded on a page a student uses. Questions typed into it are answered by an AI model running on Cloudflare Workers AI, so the text goes to Cloudflare and to no other AI vendor; a daily message count is kept against a hash of the network address, not the address itself. If a teacher reports a problem through it, the report, the teacher's email address and the errors and failed requests recorded on that page (with query strings, tokens and addresses removed) are emailed to our team through Brevo. The bubble on the console names the signed-in teacher's email so a report does not have to ask for it. Nothing from a game, a question set or a student is part of any of it.
Changes
If a subprocessor is added, this page is updated and schools with a signed agreement are notified in advance. Last change: 2026-10-01 (the help bubble on teacher pages: Workers AI and Brevo added to the table). Reviewed 2026-10-05 when names for grading were added: no provider was added, because those names are not sent anywhere.