Data Processing Agreement (DPA)

This agreement is part of EduRol Terms. The school is controller; EduRol is processor.

The school decides why pupil grades exist. EduRol processes data only per documented platform instructions.

Processing includes accounts, grade book, homework, and exams. Schools export or delete via the director panel.

RLS, encryption, audit logs (3 months), notifications (7 days). Access limited to authorized staff.

Public list: /legal/subprocessors. EduRol notifies material new sub-processors.

EduRol assists schools with breach assessment and CNPDCP notifications when required.