Data processing agreement

A data processing agreement (DPA) sets out how Acadenova processes an academy's data as its processor, and the safeguards in place.

Acadenova signs a data processing agreement with an academy before any of that academy’s data is imported into Acadenova.

• Supabase, for the database, authentication and file storage.
• Vercel, for hosting the application.

• Access to data in the app is controlled by role: admins, teachers and students each see only what their role allows.
• Data is accessed server-side, through actions that check who is calling before any database or storage operation.
• Data is hosted in the European Union.
• Connections to the app are encrypted, over HTTPS.

To request a copy of our data processing agreement, email info@acadenova.com.