Loading...
Data Processing
Data Processing Agreement
Our Data Processing Agreement (DPA) governs how we process personal data on behalf of schools and institutions, ensuring GDPR and regulatory compliance.
Download Our Standard DPA
Our pre-signed DPA is ready to use for most institutions. For custom terms, contact us.
Key Definitions
Data Controller
Your institution (the school, district, or organization)
Data Processor
ClassTempo, processing data on your behalf
Personal Data
Information relating to identified or identifiable individuals
Processing
Any operation performed on personal data
Subprocessor
Third parties we engage to process data
DPA Highlights
Data Processing Scope
- Processing only for educational service delivery
- No processing for advertising or profiling
- Clear data categories and purposes defined
- Strict data minimization practices
Security Measures
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Access controls and authentication
- Regular security audits and testing
Subprocessor Management
- Vetted subprocessors only
- Contractual data protection obligations
- Notification of subprocessor changes
- Right to object to new subprocessors
Data Subject Rights
- Support for access requests
- Data portability assistance
- Deletion upon request
- Rectification of inaccurate data
Data Breach Notification
In the event of a personal data breach, ClassTempo will:
- Notify affected data controllers within 72 hours of becoming aware
- Provide details of the breach, affected data, and remediation steps
- Cooperate with investigations and regulatory notifications
- Implement measures to prevent future incidents