Data Processing Agreement (DPA)
For use by schools and educational institutions
A Data Processing Agreement is a legally binding contract required under UK GDPR (Article 28) when schools use external services that process student personal data.
TruthLens acts as a Data Processor on behalf of your school (the Data Controller). This DPA outlines how student data is protected and processed.
Data Scope
Student names, emails, analysis history, scores, and progress tracking.
Security Commitments
AES-256 encryption at rest, TLS 1.3 in transit, regular security audits, and incident response procedures.
Data Retention
Data retained for the subscription period. Deleted within 12 months of account termination to support school record-keeping and audit requirements.
Student Rights
Schools can request data access, deletion, or portability. Requests handled within 30 days.
Audit & Compliance
Schools may audit TruthLens data practices. Security and compliance information available upon request.
- Download the template below
- Fill in your school details (name, address, contact)
- Review with your Data Protection Officer or Legal team
- Both parties sign and keep a copy
- Email the signed DPA to support@truthlens.uk before student data processing begins
This DPA covers:
- UK GDPR (General Data Protection Regulation)
- UK Data Protection Act 2018
- ICO Guidance on educational data processing
Click the button above to open your browser's print dialog. Select "Save as PDF" and you'll have a professional document ready to sign.
Signed DPA? Email it to support@truthlens.uk
TruthLens is committed to complying with UK data protection laws and supporting schools in their data governance.
support@truthlens.uk