A data controller is an organization that determines the purposes and means of the processing of personal data. A data processor is an organization that processes the data on behalf of the controller. 

Socrative acts as a data processor by processing data on behalf of schools and districts, who are data controllers. 

For users in the US, we have provided a National Data Privacy Agreement to meet standard obligations nationwide. It aims to address prevalent student data privacy issues and streamline the contracting processes for Socrative in schools and districts.
​
Click here for access to our signable US NDPA.

Additionally, for users in New York State, please click here for a signable version of our EdLaw 2D Rider and Parents' Bill of Rights.

For users in the EEA, Socrative has created a Data Processing Agreement (DPA). This Agreement, along with our Terms of Use outline the terms and conditions relating to the privacy, confidentiality, and security of personal data associated with use of Socrative.

Click here to access a signable version of our DPA.
Click here to access a read-only version of our DPA.

Click here to access our DPA in Norwegian.

Click here to access our DPA in Danish.
​

​