About this list
We use a small number of third parties to help us deliver the Cosine Services. Some of them process personal data on our behalf. This page lists them, what they do, and where they process data.
This list forms part of our Privacy Policy.
Notice of changes. We give at least 30 days' notice before adding or replacing a sub-processor that processes school, student, guardian, or payer personal data. Schools may subscribe to change notifications, and may object to a new sub-processor, by writing to security@trycosine.com. See clauses 8.4 to 8.6 of the Data Processing Agreement.
Transfers outside Nigeria. Most of our sub-processors process data outside Nigeria. We rely on binding contractual safeguards with each of them, as described in clause 9 of the Data Processing Agreement.
Infrastructure and platform
| Provider | Purpose | Data processed | Location of processing |
|---|---|---|---|
| Supabase | Primary database, authentication, file storage, and edge functions | All school, student, guardian, payer, and user data held in the Services | Stockholm, Sweden (EU) |
| Vercel | Hosting and delivery of the web application | Data submitted through and displayed in the web application; request and access logs | Washington, DC (USA), with global content delivery |
Payments and financial services
| Provider | Purpose | Data processed | Location of processing |
|---|---|---|---|
| Paystack Payments Limited | Provision of virtual collection accounts, receipt and settlement of payments, transaction processing, and customer validation checks | School and account holder identity and verification details; payer name, bank, and transaction details | Nigeria |
Funds are held and settled by Paystack and its licensed banking partners, not by Cosine. See clause 5 of the Terms of Service.
Communications
| Provider | Purpose | Data processed | Location of processing |
|---|---|---|---|
| Resend | Delivery of transactional email, including invoices, payment reminders, receipts, and service notices | Recipient name and email address, invoice and payment details included in the message, delivery status | United States |
| Google Workspace | Cosine's internal business email, calendar, and document storage | Correspondence with schools, payers, and users, including support and complaints correspondence | United States and other Google data centre locations |
Application distribution
| Provider | Purpose | Data processed | Location of processing |
|---|---|---|---|
| Apple (App Store) | Distribution of the Cosine mobile application on iOS | Distribution and crash data as collected by Apple. Apple does not receive school, student, guardian, or payer data from us | United States and other Apple locations |
| Google (Google Play) | Distribution of the Cosine mobile application on Android | Distribution and crash data as collected by Google. Google does not receive school, student, guardian, or payer data from us | United States and other Google locations |
The app stores are distribution channels. Data you enter into the Cosine application is sent to our infrastructure, not to Apple or Google.
Lending and fund partners
Where a school applies for a credit facility, or where a scholarship or fund feature is used, personal data may be shared with the relevant lending partner or fund provider. Those partners act as independent controllers of the data they receive, under their own terms and privacy notices.
No lending or fund partners are currently engaged. We will update this list, with notice, before any such partner receives personal data.
Planned additions
We publish planned sub-processors in advance so schools have early sight of them. These providers are not yet engaged and do not currently process any data. We will give formal notice under clause 8.4 of the Data Processing Agreement before any of them goes live.
| Provider | Purpose | Expected location |
|---|---|---|
| Termii or an equivalent Nigerian messaging provider | Delivery of SMS and WhatsApp payment reminders and notifications | Nigeria |
| WhatsApp Business Platform (Meta Platforms) | Delivery of WhatsApp payment reminders and notifications, if used directly | United States and other Meta locations |
Change log
| Date | Change |
|---|---|
| 1 Aug 2026 | Initial publication |
Contact
Questions about this list, or requests to be notified of changes: security@trycosine.com