Data Processing Agreement (DPA)
Last updated: 21 September 2026
Business and academy customers who process personal data on Coursfy need a Personuppgiftsbiträdesavtal (DPA) under GDPR Article 28.
When you need a DPA
If you are an academy owner or organization using Coursfy to offer courses to your members, you are typically the data controller and Coursfy is your processor.
Our DPA template includes
- Subject matter, duration, and nature of processing
- Categories of data subjects and personal data
- Processor obligations (confidentiality, security, subprocessor rules)
- Assistance with data subject requests and breach notification
- Annex: subprocessor list (linked from this site)
DPA review template
The downloadable DPA is an unsigned draft for review. Publication does not establish a signed agreement, legal approval or verified deployment locations. Contact privacy@coursfy.com to arrange the applicable agreement.
Subprocessors
The current subprocessor list is published at /legal/subprocessors and updated with notice per the DPA.