Sub Processors | Fourth Reality

SUB-PROCESSORS

Last updated: 7th May 2026

Fourth Reality engages a small number of carefully selected third-party services ("sub-processors") to help deliver the VR LMS Platform. This page lists every sub-processor we currently use, the service they provide, the data they process, and the region they operate in.

This list forms part of the Data Processing Agreement (DPA) we have in place with each subscribing university. Whenever we add or replace a sub-processor, we will update this page and notify each customer's registered administrator by email at least 30 days in advance. Customers can object to a change on reasonable data protection grounds within that period.

If you have any questions or wish to object to a sub-processor change, email info@fourthreality.com.

CURRENT SUB-PROCESSORS

Google Ireland Limited (Firebase)

Service: Cloud Firestore (database), Cloud Functions (server-side processing), Authentication, and Hosting for the LMS Platform web portal.

Data processed: University account details, administrator email addresses, encrypted LMS API tokens, module configuration, anonymised student-seat hashes, pre-aggregated analytics.

Region: europe-west3 (Frankfurt, Germany).

Data processing terms: cloud.google.com/terms/data-processing-addendum

Amazon Web Services EMEA SARL

Service: EC2 hosting for our TRAX Learning Record Store, which stores xAPI quiz statements during the 90-day retention window.

Data processed: Student identifier (email or institutional ID), per-question quiz results, course-session timestamps.

Region: eu-west-1 (Dublin, Ireland).

Data processing terms: aws.amazon.com/compliance/gdpr-center

Resend, Inc.

Service: Transactional email delivery — welcome messages, trial expiry warnings, LMS token failure alerts, and cancellation or reactivation confirmations sent to university administrators.

Data processed: Administrator email address and the contents of the transactional email itself.

Region: eu-west-1 (Dublin, Ireland).

Data processing terms: resend.com/legal/dpa

WHERE DATA IS STORED

All sub-processors listed above operate within the European Economic Area. Personal data does not leave the EEA. Should we ever add a non-EEA sub-processor, we will rely on appropriate safeguards under Chapter V of the GDPR (such as the European Commission's Standard Contractual Clauses) and announce the change here at least 30 days in advance.

SUBSCRIBING TO CHANGE NOTIFICATIONS

If you are not currently a customer but would like to be notified when this list changes, email info@fourthreality.com and we will add you to the notification list.