Below is a summary of the commitments made in Sections 5 and 11 of our standard Data Processing Agreement. More information on this agreement, including whether it applies to you, can be found on the Documents page.

International transfers

Student Data stays in the UK and EU.

Our sub-processors

We use trusted service providers for the processing of Student Data. Each one is listed with its purpose and location on our Sub-Processors page.

All sub-processors are bound by agreements to ensure compliance under the UK GDPR.

We will provide notice before adding new sub-processors. You will have a reasonable opportunity to object on reasonable data protection grounds before any new sub-processor is added.

Corporate ownership of our sub-processors

Several of our sub-processors are companies headquartered in the United States, operating the UK and EU regions in which your Student Data is stored and processed. Our Sub-Processors page sets out the transfer safeguards in place for each of them.