Data processing

Last updated 8 November 2026

Schools and organisations often ask whether they need a data processing agreement with us. In most cases you do not, because Legibright does not process your documents on our systems.

• Document content is read and changed only inside Google Workspace™, by your users, through Google's own services. Ironbit never receives it, so Ironbit is not a processor of document content.
• Licence data (user email addresses checked against your school licence, and billing contact details) is used by Ironbit as a controller to provide and bill for the service, as described in the privacy policy.
• Sub-processors for licence and billing data: Stripe, Inc. (payments) and Cloudflare, Inc. (hosting and licence storage).

If your organisation still needs a signed agreement, email privacy@legibright.app with your template and we will review it.