Legal
Data Processing Agreement.
Version 1.0 · Effective September 2026
The Data Processing Agreement sets out the terms under which EduNex processes personal data on behalf of a school. It is incorporated by reference into the EduNex Terms of Service and applies to every school using the platform.
Key terms
What the DPA covers.
- RolesThe school is the data controller. EduNex is the data processor. Subprocessors are listed at /subprocessors.
- ScopeEduNex processes personal data only to provide the Service and only on the school’s documented instructions.
- SecurityEduNex maintains the technical and organisational measures described at /security.
- SubprocessorsEduNex may engage subprocessors. The current list is published and updated before any new subprocessor is added.
- Data subject rightsEduNex assists schools in responding to access, correction, deletion, and portability requests.
- Breach notificationEduNex notifies affected schools within 72 hours of confirming a data breach.
- TerminationOn termination, EduNex returns or deletes school data within 30 days, at the school’s choice.
- Governing lawThe DPA is governed by the laws applicable to the school’s jurisdiction, as agreed in the master services agreement.
Request a copy.
Schools can request a signed copy of the DPA at any time. Write to legal@edunex.africa with your school name and, if applicable, the name of the counterparty who will sign.
For custom DPAs required by a school, district, or ministry, our legal team will work with you directly. We aim to respond to DPA requests within 3 business days.