Data processing agreement

Schools are the controller. SIGHTLEARN is the processor for hosted school records.

A signed DPA is issued when an Institution Owner creates a school or when a board requests one at hello@sightlearn.com. This page is the public summary, not a substitute for the signed document.

• Purpose: operate SIS, learning, fees, identity and school websites for that tenant.
• Subprocessors: Azure hosting and Azure Communication Services for transactional email.
• Isolation: tenant-scoped data planes. Cross-tenant reads are incidents.
• Retention: follows the school's legal hold and the platform retention jobs.