A data controller is the entity that determines the purposes, conditions and means of the processing of personal data, while the processor is an entity which processes personal data on behalf of the controller. In Socrative, teachers, schools, or districts (including kommunes, municipalities, and multi-academy trusts) are the data controllers depending on your account type and structure.

A data processor is an entity which processes personal data on behalf of the controller.

Socrative is a data processor acting on behalf of educational institutions for any personal data provided by users of our apps. This could involve displaying student names in a room roster, sending notifications to the email address you've provided, or surfacing teacher information on a license key to administrators.

Personal data entered into the Socrative app is inaccessible by Socrative and is only being processed for the functioning of the app. When required, Socrative also provides specific, limited data to the sub-processors we use to support additional app or business functionality. In this case, Socrative acts as the data controller for the sub-processor.

​