Sub-processors
Version 1.3 · Last updated 9 August 2026
Yenlio is provided by Nursery Room Ltd, trading as Yenlio. This page lists the third-party providers (sub-processors) Yenlio uses to deliver its service, and what each one processes.
Yenlio's primary hosting and storage is in the United Kingdom and Ireland/EU. Where a specialist sub-processor is used, Yenlio requires appropriate contractual, security and transfer safeguards and keeps this list up to date.
Some providers process data only where the relevant feature is enabled or used by the customer. AI-assisted features are assistive only and require staff review; translation is convenience machine translation that may not be perfect.
| Provider | Service purpose | Data categories | Location / region | Notes |
|---|---|---|---|---|
| AWS | Hosting, database, storage, networking, monitoring/logging, and (where enabled) AI/ML services | Customer & operational data | UK / Ireland (EU), according to deployed architecture | Core infrastructure. |
| GoCardless | Direct Debit collection and payment processing | Payment/mandate identifiers, billing/payment status | Per GoCardless terms | Yenlio does not store full bank details. |
| DeepL (incl. deepl.v2-translate) | Translation for parent/staff communication where enabled | Message/observation text submitted for translation | Subject to DeepL's terms/configuration | Convenience machine translation; may not be perfect. |
| Resend | Transactional email where used | Recipient email, message content | Subject to Resend's data-processing terms | Used where enabled. |
| Vonage | SMS messages where used | Mobile number, message content | Subject to Vonage's terms | Used where enabled. |
| Sentry | Error monitoring and diagnostics | Diagnostic/technical data, limited context | Subject to Sentry's data-processing terms/configuration | Operational reliability. |
| AWS CloudWatch | Operational logging and monitoring | Operational/technical logs | UK / EU per configuration | Reliability/observability. |
| AWS CloudTrail | Audit / security logging | Security & audit event logs | UK / EU per configuration | Security/audit. |
| Anthropic Claude via AWS Bedrock | AI-assisted functionality where enabled | Prompt/response content for the relevant feature | EU model endpoints where configured (eu.anthropic.claude-sonnet-4-6; eu.anthropic.claude-haiku-4-5-20251001-v1:0) | Assistive only; staff review required. |
| AWS Rekognition | Image/media safety or processing features where enabled | Image/media content | UK / EU per configuration | Used where enabled. |
| AWS Transcribe | Speech-to-text features where enabled | Audio submitted for transcription | UK / EU per configuration | Used where enabled. |
| Freshdesk (Freshworks) | Support ticket handling — the in-app problem reporter, the Help & support portal, and the public support form | Requester name and email, a setting reference, the subject and description the reporter writes (free text, which may name a child), technical diagnostics where the reporter chooses to include them, and any screenshot or image the reporter attaches — which is a picture of whatever was on their screen and may therefore contain children's names, photographs, health, SEND or safeguarding information | Subject to Freshworks' data-processing terms and configured region | The customer never sees the Freshdesk portal; tickets are read and answered inside Yenlio. What reaches Freshdesk is what the reporter typed plus, at their choice, the technical block shown to them before sending. Server error messages and response bodies are excluded. Images are optional, never automatic: the reporter chooses to attach one, child photographs are removed before capture, the rest of the image starts obscured and only what they deliberately reveal is sent, and they review the exact final image before it leaves the device. Yenlio keeps its own copy in the UK and deletes it on a schedule; the copy held by Freshworks is governed by Freshworks’ own terms and retention — see docs/legal/freshworks-processing-record.md. |
| AutoPostcode | UK address lookup when someone types into an address field | The partial address or postcode typed, and nothing else | United Kingdom | Suggests addresses from Royal Mail PAF data. No name, child, user or setting identifier is sent with the search, and the request is made by our servers, so the provider does not receive the device's IP address. |
This list may change as the service evolves. Yenlio gives notice of material changes to its sub-processors in line with the Data Processing Agreement (see the DPA).
If you have any questions about this list, contact privacy@yenlio.app.