Curriculum Warehouse Subprocessors

Effective Date: August 22, 2026 Last Updated: August 23, 2026 Curriculum Warehouse, managed by NJ Data Diva LLC, utilizes a select group of third-party technology providers to ensure the effective operation, security, hosting, support, and communication regarding the Curriculum Warehouse Platform and public Website. This page outlines the third-party providers that may engage in data processing on behalf of NJ Data Diva LLC in relation to Curriculum Warehouse. The platform aims to use service providers solely for legitimate operational purposes, ensuring that their access to information is restricted to the services they deliver. Additionally, users should review this notice in conjunction with the Curriculum Warehouse Privacy Policy, Security & Data Protection Policy, AI Use Policy, Student Data Scope, and Terms of Service, which also addresses aspects related to AI functionality and the use of Google Cloud services.

1. Platform Infrastructure Subprocessors

Google LLC / Google Cloud Platform and Firebase

Service: Cloud infrastructure, platform hosting, database, authentication, storage, and related technical services

Purpose: Google Cloud and Firebase deliver the essential infrastructure utilized to operate the private Curriculum Warehouse Platform, leveraging advanced AI functionality to enhance capabilities.

Services may support:

- Firebase Hosting for the private application;

- Cloud application infrastructure;

- Database storage;

- File storage;

- Server-side processing;

- Authentication;

- Platform hosting;

- Security services;

- Backup and recovery processes;

- Related infrastructure functions.

The private Curriculum Warehouse application is hosted on Firebase Hosting and related Google Cloud services, ensuring robust support and privacy measures.

The private application environment is distinct from the public Curriculum Warehouse marketing and legal website hosted through GoDaddy, maintaining Curriculum Warehouse privacy.

Information that may be processed: Depending on the specific Curriculum Warehouse feature in use, the Google Cloud/Firebase infrastructure might process:

- Authorized user names;

- Professional email addresses;

- Account identifiers;

- Client or district affiliations;

- Authentication and authorization information;

- Assigned platform roles and permissions;

- Client curriculum content;

- Uploaded documents and attachments;

- Lesson-planning content;

- Platform configuration information;

- Technical and usage information;

- Active session information;

- System and audit records;

- Other information reasonably necessary to operate, secure, maintain, or support the platform, including data processing activities shared with third-party technology providers.

Primary Platform processing location: The Curriculum Warehouse utilizes United States-based Google Cloud infrastructure for its primary platform data and services, upholding a commitment to security and efficiency.

Google Cloud provides the principal cloud infrastructure that supports the private Curriculum Warehouse Platform, integrating AI functionality for improved performance.

2. Artificial Intelligence Subprocessor

Google LLC / Google Gemini

Service: Artificial intelligence processing

Purpose: Curriculum Warehouse utilizes Google Gemini, a pivotal component of Google Cloud services, to deliver enhanced AI functionality for AI-assisted tasks within the production platform.

Authorized Users with access to the applicable functionality may invoke Google Gemini through features of Curriculum Warehouse, including those aimed at supported lesson-planning.

Curriculum Warehouse currently operates using Gemini 2.5 Flash for AI-assisted lesson-content generation, ensuring compliance with the latest curriculum standards.

The specific version of the Google Gemini model employed may evolve over time as Platform functionality, technical requirements, performance metrics, costs, or responsible-use considerations change, in line with data processing updates from third-party technology providers.

Information that may be processed: When an Authorized User initiates an AI-assisted request, Google Gemini can process pertinent information transmitted through that feature as reasonably necessary to generate the desired result.

Depending on the request and the feature utilized, this processing may encompass:

- Prompt or request text input by the Authorized User;

- Curriculum or lesson-planning data included in the AI request;

- Instructional context provided through the supported feature;

- Information vital for generating the requested AI-assisted content;

- Related technical details concerning the request.

The specific content transmitted varies based on the feature employed and the information encompassed in the request.

It is important to note that Student Identifiable Information must not be submitted to the AI-assisted functionality of Curriculum Warehouse. The AI functionality provided by Curriculum Warehouse is designed to enhance professional curriculum and instructional-planning workflows, rather than engaging in individualized student-data processing.

NJ Data Diva LLC does not use client-specific curriculum data to train external AI models.

Additional requirements pertaining to Google Gemini and AI-assisted functionality are detailed in the Curriculum Warehouse AI Use Policy, which emphasizes privacy and responsible use.

3. Public Website and Communications Service Providers

GoDaddy

Service: Public Website hosting and Website-management services

Purpose: GoDaddy provides technology utilized to operate and manage the public website curriculumwarehouse.com, ensuring compliance with Curriculum Warehouse privacy standards. Their services facilitate the processing of data associated with:

- Website visits;

- Technical web requests;

- Cookies or similar website technologies;

- Website performance or traffic information;

- Contact form submissions;

- Website communications; and

- Other information voluntarily submitted through the public website.

It is important to note that GoDaddy does not serve as the primary database or hosting environment for private Curriculum Warehouse district curriculum environments. The private Curriculum Warehouse platform and client curriculum information are securely hosted separately through Google Cloud services, upholding data processing integrity.

Brevo

Service: Email delivery and communications

Purpose: Brevo provides robust email delivery and communication services utilized by Curriculum Warehouse for various purposes, including business, support, operational, transactional, and other authorized email communications. With the integration of AI functionality, Brevo enhances the effectiveness of these communications. Depending on the type of communication and features used, Brevo may process information such as:

- Recipient name;

- Professional email address;

- Sender information;

- Email subject and message content;

- Delivery status;

- Bounce or error information;

- Date and time of email activity; and

- Limited email engagement information where applicable tracking functionality is enabled.

Brevo may also maintain technical logs necessary to deliver, troubleshoot, secure, and report on email communications. However, Curriculum Warehouse does not utilize Brevo as the primary storage environment for client curriculum content, reinforcing their commitment to privacy and the responsible use of third-party technology providers. Information processed through Brevo is limited to what is reasonably necessary to provide applicable email and communication services.

4. Client-Selected Identity Providers

Curriculum Warehouse may integrate with organizational identity providers selected and controlled by Clients, including Google Workspace, Microsoft 365, and other supported third-party technology providers. These services may authenticate an Authorized User and provide limited account or authentication information necessary for Platform access, leveraging AI functionality where applicable. For instance, Curriculum Warehouse may receive critical information such as professional email address, account identifier, name, authentication provider, authentication status, and other data processing details made available through the supported authentication process. Clients are responsible for configuring their identity-provider environments and determining which individuals are permitted to authenticate to Curriculum Warehouse. In limited circumstances, a student account may attempt authentication due to a Client's identity-provider configuration, shared email domain, access-approval settings, or other Client-controlled configurations. Such an authentication attempt may result in Curriculum Warehouse receiving limited authentication or security information as described in the Curriculum Warehouse privacy policy and Student Data Scope. However, an unintended authentication attempt does not authorize a student to use Curriculum Warehouse. When a Client employs its own Google Cloud services, including Google Workspace or Microsoft 365 environments, the Client maintains a separate relationship with that identity provider. Consequently, a Client-selected identity provider is not necessarily acting solely as a subprocessor of NJ Data Diva LLC merely because Curriculum Warehouse supports authentication through that service.

5. Other Technology and Optional Service Providers

Curriculum Warehouse may add or utilize additional third-party technology providers as Platform functionality, including AI functionality, and operational requirements evolve. Examples of these providers may include those supporting technical monitoring, communications, professional services, implementation, analytics, support, security, infrastructure, or future optional Platform functionality. When a third-party provider processes Client Content or Authorized User personal information on behalf of Curriculum Warehouse in relation to data processing for a production Platform feature, NJ Data Diva LLC will update this page accordingly to identify the provider and its general purpose, such as those offered through Google Cloud services. Curriculum Warehouse will ensure that no provider is intentionally identified as an active Platform subprocessor before the provider is actively engaged in relevant production processing.

6. Contractors and Professional Service Providers

NJ Data Diva LLC may utilize qualified contractors or professional service providers for various services, including AI functionality implementation, curriculum migration, professional development, training, consulting, technical assistance, and other specialized business services involving third-party technology providers.

A contractor who does not access Client personal information or private Client Platform data is not noted on this page solely due to their services rendered to NJ Data Diva LLC.

In instances where a contractor needs access to non-public Client information to perform authorized services, NJ Data Diva LLC will enforce reasonable confidentiality and data-protection obligations, which are aligned with the data processing requirements appropriate to the services being provided, including those related to Google Cloud services.

Access should be restricted to only the information reasonably necessary to accomplish the authorized service.

NJ Data Diva LLC retains full responsibility for the Services it delivers to Clients through authorized contractors, in accordance with the applicable Client agreement.

7. Subprocessor Responsibilities

Curriculum Warehouse selects third-party technology providers based on various factors that may include operational necessity, security capabilities, privacy protections, reliability, technical functionality, contractual protections, service availability, and overall suitability for the applicable service. Subprocessors may process information solely to the extent reasonably necessary for the services they provide to NJ Data Diva LLC, leveraging platforms such as Google Cloud services when applicable. It's important to note that the use of a subprocessor does not transfer ownership of Client curriculum materials to that provider or NJ Data Diva LLC. Client Content remains subject to the ownership provisions outlined in the Curriculum Warehouse Terms of Service. Additionally, Student Identifiable Information must not be intentionally submitted to or maintained within Curriculum Warehouse, including through AI functionality or any AI-assisted processing.

8. Changes to Subprocessors

NJ Data Diva LLC may add, replace, or discontinue subprocessors as Curriculum Warehouse technology, service providers, and AI functionality evolve according to operational needs. This includes third-party technology providers to ensure effective data processing capabilities that align with our ongoing service improvements.

The current list of applicable subprocessors will be maintained on this page, reflecting our commitment to Curriculum Warehouse privacy and security.

When a material new subprocessor is set to handle Client Content or Authorized User personal information on behalf of Curriculum Warehouse, NJ Data Diva LLC will give notice in accordance with any applicable Client-specific contractual requirements.

Clients with reasonable concerns regarding a newly identified subprocessor can reach out to Curriculum Warehouse to discuss those concerns and how they relate to our use of Google Cloud services.

Please note that changes involving emergency security measures, infrastructure updates, provider availability, or service-continuity requirements may be executed before advance notice is reasonably practicable.

Furthermore, changes relating to a specific technical service, model, version, or underlying implementation provided by an already disclosed provider do not necessarily imply the addition of a new subprocessor.