About this agreement
When a school, multi-academy trust or other organisation uses PICRAT Suite on behalf of its staff, PICRAT Suite acts as the data processor and the organisation is the data controller. This Data Processing Agreement sets out the terms required by Article 28 of the UK GDPR.
The template below is ready to review, complete and sign. It covers the details of the processing, the approved sub-processors, the technical and organisational security measures, breach notification, retention and deletion, and international transfers. The sub-processor list matches the one published in our privacy notice.
For individual teachers who sign up in a personal capacity, PICRAT Suite is the controller and this agreement does not apply. It is intended for use where a school or trust is the controller.
Download
Download the DPA template (Word, .docx)
Need a countersigned copy, or want to talk it through first? Email privacy@picrat.com and we will help.
This template is provided as a starting point and is not legal advice. Please review it, and take your own legal advice, before signing.