πŸ“„ Data processing

Data processing for schools

How to put a DPA in place and what it covers.

This page explains how schools can put a data-processing agreement in place with LessonHQ. It is informational and does not itself form a contract.

For schools & MATs

  • We can provide a Data Processing Agreement (DPA) covering LessonHQ's role as a processor of the personal data your staff enter.
  • Our subprocessors are listed on the Subprocessors page.
  • Account data is hosted in the EU (Hetzner, Germany).
  • No student personal data is required to use the teacher tools; the parent Student Portal is a separate, home-use, parent-managed area.
  • Teachers may choose to enter pupil first names (Report Writer, Markbook, homework links) or paste pupil answers (Marking Assistant). We process these only to provide that feature, and advise using first names or initials only.
  • AI providers receive only what a teacher types or uploads for a resource - never account details.

Request a DPA

Email [email protected] with your school/MAT name and we will send our current DPA and security documentation for your DPO to review.

The specific wording of any DPA, DPIA support and contractual terms will be confirmed in writing - this page is a summary, not the agreement itself.