Data Processing Agreement
Platform DPA summary · August 2026
Roles
The subscribing school acts as data controller for school and student personal data entered into Extended Essay Dashboard. Extended Essay Dashboard acts as processor and processes that data to provide, secure and support the contracted service.
Instructions and confidentiality
Processing is limited to the documented operation of the service and authorised support. Access is restricted to authorised personnel and technical service providers that require access to perform their role.
Security
The service uses authenticated access, tenant-aware row-level security, role-based authorization, TLS-protected transport and the hosting platform’s encryption-at-rest controls. School-level authorization is enforced in the data layer and is not based solely on interface filtering.
Sub-processors
Current sub-processors and their purposes are listed on the Sub-processors page. Material changes will be reflected there and communicated to subscribing schools where required.
International transfers
Where personal data is transferred internationally, the hosting provider states that it uses applicable lawful transfer mechanisms including Standard Contractual Clauses where required.
Data subject requests
The platform provides a tracked request workflow for access/export, deletion, rectification and restriction. Schools remain responsible for deciding and responding to requests where they are the controller.
Deletion and return
Schools may request export or deletion in accordance with the subscription agreement and retention policy. Live application data is removed according to the selected action; residual encrypted backups follow the infrastructure provider’s backup lifecycle.
Incident support
If we become aware of a personal-data breach affecting school data, we will notify the affected controller without undue delay and provide information reasonably required for the controller’s regulatory obligations.
For procurement or a signed agreement, contact hello@extended-essay.com. See also Sub-processors and Security Overview.