Skip to content

Sub-processors

Document Sub-processors Register
Version 1.0
Effective 26 March 2026
Last reviewed 26 March 2026
Owner compliance@rtopacks.com.au
Status Active

PUBLIC · trust.rtopacks.com.au/sub-processors · Last updated: March 2026

RTOpacks is operated by United Central Colleges of Australia Pty Ltd (ABN 59 168 872 535). This page lists the third-party sub-processors we use to deliver the platform — organisations that may process personal data on our behalf.

We review this list regularly. If you have questions about how your data is handled, contact compliance@rtopacks.com.au.


Sub-processor Country Purpose Data shared
Cloudflare, Inc. United States (data processed in Australia — Sydney region) Platform hosting, edge compute, database storage, and content delivery All platform data
Resend, Inc. United States Transactional email — sign-in links, account and subscription notifications Email address, name
Stripe, Inc. United States Payment processing Payment data, email address
Twilio Inc. United States SMS notifications for account activity Phone number (where provided)
Google LLC United States Authentication via Google account sign-in Email address, Google account ID
Australian Government — training.gov.au / NCVER Australia Source of National Register data (read-only) None — no personal data shared
Australian Government — abr.business.gov.au Australia ABN verification (read-only) None — no personal data shared
Anthropic, PBC United States AI-assisted features within the platform Query content submitted to AI features

Notes

  • Data residency: all data stored in Cloudflare D1 and R2 is processed in the Sydney (SYD) region. No personal data is intentionally stored outside Australia.
  • Australian Government sources (training.gov.au, abr.business.gov.au) are used as read-only data sources only. No personal data is transmitted to these services.
  • Anthropic API is called only for interactive AI features in the Composer. The Knowledge Navigator feature serves pre-written static content and does not call the Anthropic API.
  • This list does not include development-time tools (Figma, GitHub) that do not process user data at runtime.
High contrast