Tapestry Sub-Processors

Not all parts of Tapestry are run in-house. Here is a list of the sub-processors that we use. They are under a written contract that ensures they are compliant with UK data protection law.

For the avoidance of doubt: We are accountable to you for their actions. If one of our sub-processors does something wrong, it is our fault – we won’t pass the buck.

For the avoidance of doubt: We instruct our sub-processors in ways that are consistent with the Data Processing Agreement we have with you.

• AmazonWebServices. They host Tapestry. They are ISO 27001 compliant. Data is stored and processed in Germany and Ireland.
• Microsoft. We will occasionally use Microsoft systems to store Tapestry data which we will access from our computers. This data is all stored and processed in the UK and EEA.
• Slack. We will occasionally use Slack to discuss Tapestry data with a colleague e.g. as part of fixing a bug or resolving a support ticket, and to share data between relevant individuals here at the Foundation Stage Forum. This data is all stored and processed in the UK and EEA.

From January 2026 we will also be using:

• Sentry. We use this to help us find bugs in our apps. Data is stored in the EEA but some will be processed by their sub-processors in the US. They use the IDTA as their appropriate safeguard for this transfer of data.

If push notifications are enabled, and both you and the end user consent, push notifications can include personal data. This data will be sent via:

• Apple. For push notifications sent to the iOS app. Data will leave the EEA and UK to be processed on Apple’s servers in the US.
• Google. For push notifications sent to the Android app. Data will leave the EEA and UK to be processed on Google’s servers in the US.

Note Apple and Google do not offer DPAs for this transfer, so we do not recommend you enable personal data to be included unless you are based outside of the UK and the EU.

If you require more information on any of these sub-processors please contact dpo@eyfs.info.

Here is list of the sub-processors that we use as part of our billing and support system. This is data that we are the data controllers of. It relates to invoices for your Tapestry subscription and supporting you with Tapestry. It does not relate to data placed by you in Tapestry.

• Amazon Web Services. For hosting CRM data.
• Pipedrive. An additional CRM system.
• Barnian Media Ltd. For technical support.
• Global Payments. For managing credit card payments.
• Zoho Mail. For managing our email.
• Microsoft. For managing our email.
• Webinar Geek. For managing webinar sign ups.
• Slack. For conferring on support requests and customer accounts.
• Klaviyo. For managing mailing lists, sending those messages, and tracking engagement with them e.g. for newsletters.
• Typeform. To collect and process requests, e.g. for trials.
• Zapier. For integrations and data transfers between systems in this list.
• Calendly. To collect your contact information when you book a demo.
• Self Employed Contractors. We occasionally hire individuals for short term contracts to help with specific projects or as consultants.

Some data within the above systems is processed outside of the UK. When that happens we ensure appropriate safeguards are in place. These are a mix of adequacy agreements (for data processed within the EEA), the US-UK Data Bridge, and the IDTA.

If you would like more information, please email dpo@eyfs.info.

We may, occasionally, need to add or change the sub-contractors we use to process some of your data.

We will update this page whenever that happens. If the change relates to data stored on Tapestry, or means that any data is processed in a way which is not consistent with what is in our contract, we will alert you to the change by a notification within Tapestry, a banner on tapestryjournal.com, or an email.