Every third party that touches your data, named.

Microsoft Azure is the entire substrate. Every service below runs inside Azure under the same Microsoft Online Services Data Protection Addendum.

• Microsoft Azure — Compute

  West US 2 (United States) — every edition

  Role. Static Web Apps, Container Apps, Container Apps jobs, Azure Functions

  Agreement. Microsoft Online Services DPA + Azure customer agreement (public reference: aka.ms/dpa)

• Microsoft Azure — Storage

  West US 2 (United States); database backups geo-redundant to the paired region West Central US. Other regions built on request; none in use today

  Role. Blob Storage (tenant-scoped containers), Cosmos DB (Mongo API), Azure Database for PostgreSQL, Azure Cache for Redis

  Agreement. Microsoft Online Services DPA

• Microsoft Azure — Security

  West US 2 (United States); Front Door on the Microsoft global edge

  Role. Key Vault (private endpoint), NAT Gateway (egress), Front Door + web application firewall

  Agreement. Microsoft Online Services DPA

• Microsoft Azure — Monitoring

  West US 2 (United States)

  Role. Application Insights (server + client telemetry), Log Analytics (operational logs)

  Agreement. Microsoft Online Services DPA

• Microsoft Azure — Messaging

  West US 2 (United States)

  Role. Service Bus (async job queues for course generation, LCP summary, learning profile, email send)

  Agreement. Microsoft Online Services DPA

• Microsoft Azure — Networking

  West US 2 (United States)

  Role. Virtual Network with private endpoints; Private DNS zones

  Agreement. Microsoft Online Services DPA

• Microsoft Azure — Identity

  Global Microsoft Entra

  Role. Microsoft Entra ID for MindHYVE staff identity and administrative access to production systems

  Agreement. Microsoft Online Services DPA

• Microsoft Azure — Cognitive Services (Speech)

  United States (Azure)

  Role. Text-to-speech (read-aloud) and speech-to-text for voice input; voice recordings are transcribed in memory and not stored

  Agreement. Microsoft Online Services DPA

Every AI request runs on Microsoft Azure AI Foundry, under the same Microsoft agreement as the rest of the substrate, with no use of inputs or outputs for model training. No AI request is sent to any other company: a build check in every ArthurAI™ code repository blocks calls to model providers outside Azure. The Foundry service is in East US 2; its model deployments are Azure global deployments, which Microsoft documents may process requests in any Azure region, while data they store at rest stays in the United States geography.

• Microsoft Corporation — Azure AI Foundry

  Service in East US 2 (United States); requests on global deployments may be processed in any Azure region; no training on inputs or outputs

  Role. Hosts and executes every model composed in Eve-Education™ F5/reasoner (classification, reasoning, generation, vision, multilingual and embedding components). Microsoft is the processing entity for every call.

  Agreement. Microsoft Online Services DPA + Azure AI Foundry service terms (public reference: aka.ms/dpa)

Transactional email and notification delivery.

• Microsoft Communication Services

  United States (Azure Communication Services data location)

  Role. Transactional email (account notifications, password reset, certificate delivery, parental consent emails where applicable)

  Agreement. Microsoft Online Services DPA

• Expo (650 Industries, Inc.)

  Expo infrastructure

  Role. Delivers updates to the ArthurAI™ mobile app (device and app metadata, IP address)

  Agreement. Expo terms of service

Used only when a learner, parent or institution chooses it.

• Google LLC — Sign in with Google

  Google infrastructure

  Role. Optional sign-in: Google returns the account email, name and Google account identifier

  Agreement. Google terms for Sign in with Google

These operate on arthurgrid.ai, the ArthurAI™ FLE parent sign-up and checkout pages, ArthurAI™ Studio and the ArthurAI™ PLE admin. They never run in a learner or child session and never see institutional learner data.

• Microsoft Clarity

  Microsoft Clarity infrastructure

  Role. Visitor analytics (aggregate session behaviour, with form fields masked; no audio, no keystroke logging, no cross-site tracking). On arthurgrid.ai it does not load for visitors in the EU or UK unless they choose to allow it; elsewhere it loads by default and a visitor can turn it off at any time with “Your Privacy Choices” in the footer. That choice is remembered.

  Agreement. Microsoft Clarity terms + Microsoft Online Services DPA

• HubSpot, Inc.

  HubSpot infrastructure

  Role. Receives sales and contact-form enquiries (name, email, organisation, message). Never learner data.

  Agreement. HubSpot customer terms

• MindHYVE.ai, Inc. (Eve)

  Microsoft Azure, East US 2 (United States); its AI requests run on the same Azure AI Foundry global deployments described above

  Role. Our parent company’s Eve assistant on arthurgrid.ai and in the ArthurAI™ FLE parent panel (visitor or parent messages to Eve). Not used in learner or child sessions.

  Agreement. Group company: MindHYVE.ai, Inc. is the sole owner of Eve-Education, LLC

• Google LLC — Google Fonts

  Google infrastructure

  Role. Serves web fonts on certificate pages and the ArthurAI™ PLE admin; Google receives the viewer’s IP address

  Agreement. Google Fonts terms

Billing flows through one of two payment providers. ArthurAI™ stores billing metadata and subscription status; card data remains with the payment provider (PCI scope-minimized).

• Block, Inc. (Square)

  Block U.S. infrastructure

  Role. Default payment processor for subscriptions billed through the ArthurAI™ platform; the card form is served by Square

  Agreement. Square Payment Processing Terms + Square DPA

• Stripe, Inc.

  Stripe U.S. infrastructure

  Role. Payment processing for ArthurAI™ FLE family subscriptions and ArthurAI™ Studio checkout (Stripe-hosted pages), and the alternative processor for other subscriptions

  Agreement. Stripe Services Agreement + Stripe DPA