Curriculum Associates Service Providers

i-Ready

List of Service Providers for i-Ready Platform

We engage third party service providers (also commonly referred to as subprocessors) to support the hosting, security, authentication, analytics, operation, improvement, and research related to the i-Ready Platform, as well as to support our internal business operations.

We engage different service providers based on each of the School Customer's use of the i-Ready Platform. As a result, not all service providers listed below apply to every School Customer. We share with each service provider only the minimum information necessary for that provider to perform the specific services on our behalf.

Service Provider	Category	Purpose of Data Processing
Amazon Web Services (AWS)	Cloud Hosting & Infrastructure	To host, store, and operate the infrastructure required to deliver the i-Ready services securely, reliably, and at scale.
AppDynamics	Monitoring & Alerting	To monitor application performance, identify bottlenecks, and support troubleshooting to ensure system reliability and performance.
Box	Cloud Storage & Content Management	To securely store, share, and manage organizational documents and files in the cloud. This is part of the rostering process, where School Customers provide data for accounts to be created for Educators and Students.
Checkmarx	Application Security Testing	To analyze source code and application artifacts for security vulnerabilities and support secure development practices. Customer Data and Student Data are not intentionally processed as part of this activity.
Datadog	Monitoring & Alerting	To monitor system performance, detect anomalies and outages, and maintain the reliability and operational health of the i-Ready Platform.
Google Analytics	Web Analytics & Usage Measurement	To analyze aggregate usage patterns, measure engagement, and improve website and product performance. Data is used in aggregate and does not identify individual users. Google Analytics is configured and used in a manner that does not permit Google to use or share data for its own purposes.
Google Security Operations Manager	Security Operations & SIEM	To provide cloud-native security information and event management (SIEM).
MGT Impact Solutions (formerly Kitamba)	Educational Research Partner	To support specific, time‑bound educational research engagements.
Microsoft Azure	Cloud Hosting & Infrastructure	To host, store, and operate cloud infrastructure and platform services required to deliver the application securely and reliably.
Checkmarx	Application Security Testing	To analyze source code and application artifacts for security vulnerabilities and support secure development practices. Customer Data and Student Data are not intentionally processed as part of this activity.
Datadog	Monitoring & Alerting	To monitor system performance, detect anomalies and outages, and maintain the reliability and operational health of the i-Ready Platform.
Google Analytics	Web Analytics & Usage Measurement	To analyze aggregate usage patterns, measure engagement, and improve website and product performance. Data is used in aggregate and does not identify individual users. Google Analytics is configured and used in a manner that does not permit Google to use or share data for its own purposes.
Google Security Operations Manager	Security Operations & SIEM	To provide cloud-native security information and event management (SIEM).
MGT Impact Solutions (formerly Kitamba)	Educational Research Partner	To support specific, time-bound educational research engagements.
Pendo	Product Analytics & User Experience	To understand how users interact with the i-Ready Platform, including feature usage and engagement patterns, and to improve product design, onboarding, and user experience.
ReliaQuest (Grey Matter)	Security Operations	To provide managed detection and response (MDR) services by aggregating, correlating, and analyzing security signals across the environment. ReliaQuest supports threat detection, incident investigation, and response coordination.
Rubrik	Data Backup & Recovery	To provide data backup, recovery, and archiving capabilities to protect against data loss, ransomware, and disaster scenarios.
Snowflake	Data Storage, processing, and Analytics	To securely store, process, and analyze data for reporting, and analytics.
Totara (Mindtools Kineo)	Learning Management System (LMS)	To host and deliver professional development and training content for Educators, including authentication and personalization of the learning experience when Educators access the LMS through i-Ready or create an LMS account.
TrackJS	Monitoring & Error Tracking	To detect, log, and diagnose client-side application errors in real time to improve application stability and user experience.
Varonis	Data Security & Analytics	To monitor, classify, and protect sensitive data across organizational data stores. Varonis processes metadata and telemetry to enforce data governance and security policies.
WestEd	Educational Research Partner	To conduct educational research and analysis on CA’s behalf and at the direction of School Customers, in accordance with applicable law and contractual restrictions. Any processing of data is limited to the approved research scope and purposes.

Ellevation

List of Service Providers for Student users of the Ellevation Platform

Service Provider	Category	Purpose of Data Processing
Amplitude	Analytics	To analyze product usage patterns, improve functionality, and enhance user experience. Analytics are configured to support product improvement only and not cross-service tracking or advertising.
Amazon Web Services (AWS)	Cloud Hosting & Infrastructure	To host, store, and operate the infrastructure required to deliver the service securely. AWS does not access or use data except as necessary to provide infrastructure services.
AWS Transcribe	Transcription Service	To convert spoken Student responses into written text to support speech-to-text functionality within the service.
Datadog	Debugging	To monitor system performance, detect outages, and ensure service reliability.
Fivetran	Analytics	To securely transfer and synchronize data between systems in order to support analytics and reporting for product improvement.
New Relic	Debugging	To monitor system performance, detect outages, and ensure service reliability.
Ping	Identity and Access Management	To provide identity, authentication, and access management infrastructure.
Sentry	Debugging	To detect, log, and diagnose application errors and improve platform stability and security.
Snowflake	Analytics	To store and analyze data to support reporting and internal product improvement.

List of Service Providers for Educators using the Ellevation Platform

Service Provider	Category	Purpose of data processing
Amazon Web Services (AWS)	Hosting / Infrastructure	To host and operate the infrastructure required to deliver, secure, and maintain the Platform. Data processing supports core service operations only.
Amplitude	Analytics	To analyze product usage patterns, improve functionality, and enhance user experience. Analytics are configured to support product improvement only and not cross-service tracking or advertising.
AWS Transcribe	AI / Speech Processing	To convert spoken responses into text to support speech-to-text functionality within the Platform. Processing is limited to feature operation.
Box	Data Ingest	To securely transfer and store files required for authorized data ingestion workflows supporting platform functionality.
CloudAMQP	Infrastructure	To manage message queuing services that enable reliable system communication and processing.
Datadog	Debugging / Monitoring	To monitor infrastructure and application performance and ensure platform security and reliability.
elev.io	Customer Support	To provide in-application help and support tools that assist Educators while using the Platform. Data processing is limited to user support purposes.
Fivetran	Analytics	To securely transfer and synchronize data between internal systems in order to support reporting and product improvement. Data processing is limited to internal operations only.
Intercom	Customer Support	To enable in-application communication and messaging to support customer service interactions. Processing is limited to support communications.
Langfuse	Quality and reliability	To evaluate and improve AI model performance through monitoring and analysis of system interactions. Data processing supports internal quality and reliability improvements only.
New Relic	Debugging / Monitoring	To analyze system performance and monitor platform reliability in order to improve availability and stability. Processing is limited to operational diagnostics.
OpenAI	AI Support	To power AI-enabled features within the educator-facing areas of the Platform and generate responses that support Educators (not student-facing).
Ping Identity	Identity Management	To provide secure identity and access management services for user authentication and account security.
Postmark	Communications	To send transactional emails necessary for account administration, service notifications, and operational communications.
RabbitMQ	Infrastructure	To manage message queuing services that enable reliable system communication and processing.
Sentry	Debugging	To detect, log, and diagnose application errors in order to improve service reliability and performance.
ShareFile	Data Ingest	To securely transfer and store files required for data ingestion workflows supporting platform operations.
Snowflake	Analytics	To analyze data for reporting and product improvement. Data processing is limited to internal analytics.
TalentLMS	Training / Support	To deliver training materials and educational resources to Educators. Data processing is limited to training and learning support.
Zendesk	Customer Support	To manage customer support requests and operate help center services. Data is processed solely to respond to user inquiries and provide support.

Stile

List of Stile Platform's Service Providers

Service Provider	Category	Purpose of processing
Amazon Web Services (AWS)	Cloud Hosting & Infrastructure	To securely host, store, and operate the cloud infrastructure required to deliver the Stile Platform, including application services, databases, and backups. For U.S.-based customers, Student Data and Educator data is hosted on servers located within the United States.
Brightcove Zencoder	Video Processing	To transiently process and encode lesson video content so that videos load efficiently, stream reliably, and use network bandwidth effectively across devices.
ChaosSearch	Log Indexing	To index and make searchable audit and activity logs generated by the Stile Platform and its underlying infrastructure, enabling rapid investigation of operational issues, security incidents, and compliance-related events.
Embedded YouTube videos	Video	To allow Educators to search for and embed publicly available YouTube videos into Stile lessons for instructional use. Educators select videos via the embedded search tool, and Students view the selected content within the Stile Platform. Stile Platform uses YouTube API services with privacy-enhanced mode enabled and Stile is designated as child-directed.
Google (Looker)	Analytics	To generate aggregated charts, dashboards, and usage reports for internal analysis, service monitoring, and product improvement. Analytics processing is transient and performed within a dedicated AWS environment managed by Google.
Intercom	Customer Support	Educators only. To provide customer support functionality, including support ticket submission, issue tracking, and communication management, enabling timely and effective responses to Educator inquiries.
Mailchimp	Communications (Email Delivery)	Educators only. The purpose of data processing is to deliver transactional and informational email communications to Educators and other authorized contacts on behalf of Stile and CA.
Microsoft Azure	Cloud Services / AI	To provide specialized cloud services, including generative AI capabilities, used to assist Educators, support instructional workflows, and improve educational content and teaching efficiency. Processing is limited to requested functionality, with no persistent storage of Student Data. There is no use of AI in Student-facing areas of the Stile Platform.
OpenAI	Generative AI	Educators only. The purpose of data processing is to support AI-powered features that assist with lesson creation, content refinement, and time-saving instructional tasks. Usage is limited to fulfilling specific requests.
Salesforce	Customer Relationship Management (CRM)	Educators and School Customers only. The purpose of processing is to manage School Customer relationships, Educator communications, and customer support workflows. Processing is limited to School Customer contact information and Educator communications.
Zamzar	File Conversion	To transiently convert uploaded Office documents into PDF format for embedded viewing within lessons, without retaining files after conversion is complete.