Last updated: June 2026
Business and academy customers who process personal data on Coursfy need a Personuppgiftsbiträdesavtal (DPA) under GDPR Article 28.
If you are an academy owner or organization using Coursfy to offer courses to your members, you are typically the data controller and Coursfy is your processor.
Email us with your organization name, billing entity, and preferred language (EN/SV). We provide a PDF template for legal review and countersignature.
The current subprocessor list is published at /legal/subprocessors and updated with notice per the DPA.