Data Processing Agreement
For Schools, Districts & Organizations
FERPA & COPPA Compliant | SOC 2 Controls | Student Data Protection
Download Our DPA Template
Ready-to-sign agreement for your procurement or legal team review.
Who Needs a DPA?
Schools
K-12 schools implementing cyber safety curriculum need a DPA to comply with FERPA and state student privacy laws.
School Districts
Districts rolling out cyber safety training across multiple schools benefit from a single master DPA.
Organizations
Libraries, nonprofits, and youth organizations serving minors should have a DPA in place.
Minimal Data Collection
We only collect first names, ages, and learning progress. No photos, addresses, or sensitive information.
Data Deletion Rights
Schools can request complete data deletion within 90 days of contract termination. Individual deletion requests honored immediately.
72-Hour Breach Notification
We commit to notifying your organization within 72 hours of discovering any data breach affecting your students.
No Data Selling or Advertising
Student data is never sold, shared for advertising, or used for any purpose beyond providing the educational service.
Audit Rights
Organizations may request security documentation, submit questionnaires, and receive evidence of our compliance controls.
SOC 2 Type II Aligned
Our security controls are aligned with SOC 2 Trust Service Criteria for Security, Availability, and Confidentiality.
Need a Custom DPA?
We understand that some organizations have specific requirements. Our team is happy to work with your legal or procurement department to customize our DPA.