Data processing agreement

Under any realistic engagement the school is the data controller and FlyerOS is the processor. Our data processing agreement sets out the subject matter and duration of processing, the categories of data and data subjects, our obligations and yours, our sub-processors, the security measures we apply, breach notification, and the arrangements for return and deletion of data on termination.

The DPA is available to every customer and prospective customer on request, and forms part of your agreement when you sign. The current list of sub-processors is published on the security page.