Do you sign a DPA with schools?

Yes. We sign a Data Processing Agreement (DPA) with every school or organization in accordance with Article 28 of the GDPR, either before or alongside the contracting of the service. It is a requirement, not an option.

What it covers

• What data we process and for what purpose, always under the school’s instructions.
• The security measures applied.
• The authorized sub-processors (Google Cloud infrastructure, the artificial intelligence provider, the payment gateway, and the email delivery service), along with their locations.
• Retention periods and the return or deletion of data upon termination.

If you need the DPA for your records —it is common for the school’s data protection officer to request it before contracting— write to us at info@kluppy.com and we will send it to you.