Data Processing Agreement
Version 1.8•Last Updated: July 01, 2026
1. Controller vs. Processor
The subscribing school acts as the Data Controller (determining grading standards and student directories), while Gradenest acts as the Data Processor (calculating averages and hosting records).
2. Processor Obligations
Gradenest agrees to process data strictly under the controller's instructions, maintain security safeguards, notify the controller of any security incidents, and assist with data subject audits.
3. Sub-Processors
We use only secure infrastructure sub-processors (like Amazon Web Services or cloud database clusters) bound by equivalent data confidentiality agreements.