Back to home

Data Processing Agreement (DPA)

Last updated: 21 September 2026


Business and academy customers who process personal data on Coursfy need a Personuppgiftsbiträdesavtal (DPA) under GDPR Article 28.

When you need a DPA

If you are an academy owner or organization using Coursfy to offer courses to your members, you are typically the data controller and Coursfy is your processor.

Our DPA template includes

  • Subject matter, duration, and nature of processing
  • Categories of data subjects and personal data
  • Processor obligations (confidentiality, security, subprocessor rules)
  • Assistance with data subject requests and breach notification
  • Annex: subprocessor list (linked from this site)

DPA review template

The downloadable DPA is an unsigned draft for review. Publication does not establish a signed agreement, legal approval or verified deployment locations. Contact privacy@coursfy.com to arrange the applicable agreement.

Subprocessors

The current subprocessor list is published at /legal/subprocessors and updated with notice per the DPA.