Trust

Data Processing Agreement

Summary of our draft Data Processing Agreement. A DPA is negotiated and executed with each pilot institution; terms below are indicative and subject to counsel review.

Examination Center is in early access — we're onboarding institutional pilots. The information here describes our current platform and direction and may evolve; it is not a contractual commitment.

Last updated: 2026-06-18

Roles

The university is the controller; Examination Center acts as the processor, processing personal data only on the controller's documented instructions.

Scope & duration

Processing covers exam delivery, monitoring, and record-keeping for the engagement, with 12-month data retention (details).

Security measures

Technical and organizational measures are described on our Security page (server-side access control, tenant isolation, TLS, verified backups, internal ASVS L2 review).

Sub-processors

Listed at /subprocessors; we intend to notify of changes.

Data subject rights & breach

We will assist the controller with data-subject requests and breach notification under the executed DPA. Request the draft DPA: privacy@examination.center.