Data Processing Agreement

Last updated: 26 June 2026 EN

This Data Processing Agreement ("DPA") sets out additional terms for cases where TeinGo processes personal data on behalf of an institutional customer.

Document priority: This DPA applies to institutional processing only when accepted by the school/institution in writing or electronically. The Privacy Policy governs individual account, payment and platform usage data. If this DPA conflicts with the Terms of Use or Privacy Policy, this DPA controls only for institutional customer data processing; the relevant main document controls for other matters.

1. Roles

The institutional customer acts as controller for student and classroom data and provides the required notice and legal basis.
TeinGo processes institutional customer data to provide the service, maintain security and deliver support.
TeinGo may act as an independent controller for account, billing and payment records.

2. Processing Details

Topic	Description
Data categories	Classroom data, exam content, student papers, scores, feedback and technical logs
Data subjects	Teachers, institutional users, students and where relevant parents
Purpose	Educational content creation, exam reading, reporting, security and support
Duration	For the contract term; deletion/export requests and statutory retention obligations reserved

3. Instructions and Confidentiality

TeinGo processes institutional customer data only to provide the service and according to the customer's reasonable instructions. Authorized personnel are bound by confidentiality obligations.

4. Security Measures

TeinGo applies technical and organizational measures such as access controls, secure file access, logging, backups, CSRF protection, link regeneration and, where required, deletion/anonymization.

5. Sub-processors

TeinGo may use sub-processors required to operate the service. Current categories and example providers are listed in the Privacy Policy. Sub-processors are subject to appropriate data processing and confidentiality obligations.

6. Data Subject Requests and Incident Notice

TeinGo provides reasonable support for verified institutional access, deletion, rectification and portability requests. If a suspected personal data breach occurs, TeinGo will assess it and inform the customer without undue delay.

7. Deletion and Return

When the contract ends or the customer requests it, institutional customer data is deleted or reasonably exported, subject to statutory retention obligations.

This document was last updated on 26 June 2026. For questions contact hello@teingo.com