Data Processing & Compliance
When your school or institution uses TeachersFlow, you are the Data Controller and TeachersFlow is the Data Processor. A Data Processing Agreement (DPA) governs this relationship.
The full DPA is available at teachersflow.com/data-processing-agreement. You accept it when you sign up.
Regulatory Coverage
The DPA is written to meet Article 28 of the GDPR (the EU General Data Protection Regulation), covering processor obligations, breach notification, sub-processors, international transfers, and end-of-service deletion or return of data.
Your Responsibilities as Data Controller
- Ensure there is a legal basis for processing student data
- Obtain necessary consents from students and parents where required
- Keep your teacher access list accurate — remove teachers who leave your institution
- Act as the primary contact for any data protection matters involving your organization
TeachersFlow's Obligations as Data Processor
- Process data only according to your documented instructions
- Implement technical and organizational security measures
- Maintain data confidentiality
- Assist with data subject access requests and GDPR obligations where reasonably possible
- Notify you without undue delay of any personal data breach affecting your data
- Delete or return personal data at the end of the service, subject to backups and legally required retention
In the App
The Data Compliance tab in Account Settings gives organization admins:
- Links to the Terms of Service, Privacy Policy, Data Processing Agreement, and Cookie Policy
- A school-consent template — a ready-made parental consent and privacy notice your school can adapt for its own enrollment paperwork
- A full account export — a ZIP copy of everything TeachersFlow stores about the account
Questions
For data protection or compliance questions, contact info@teachersflow.com.