Back to Home

Data Processing Agreement

Schools and districts that use Auriga with students under 18 must have a signed Data Processing Agreement (DPA) in place. Our DPA is aligned with FERPA requirements and the Student Data Privacy Consortium (SDPC) National DPA framework.

Template version: 2.0 · Last updated: April 2026

DPA Template (PDF)

Download and review our standard DPA. This template can be submitted through SDPC or signed directly with Auriga.

Download DPA Template

What the DPA Covers

FERPA compliance

Designates Auriga as a school official under the FERPA school official exception, limiting use of student data to educational purposes.

Data ownership

Confirms the school retains ownership and control of all student education records processed by Auriga.

Subprocessor list

Discloses all subprocessors (Google Cloud, Firebase, AI providers) with roles and data categories processed.

Data deletion

Requires Auriga to delete or return all school data within 30 days of DPA termination, with written confirmation.

Security obligations

Commits Auriga to maintaining encryption, access controls, audit logging, and incident notification as described in our Security Practices.

Breach notification

Requires Auriga to notify the school within 72 hours of discovering a data breach affecting student records.

No data selling

Explicitly prohibits Auriga from selling, renting, or trading student data for any purpose.

Annual review

DPA is reviewed annually and updated to reflect any material changes to data processing practices.

How to Sign a DPA

  1. 1Download the DPA template above and share it with your district's legal or compliance team for review.
  2. 2Request any amendments via email to schools@auriga.education. We aim to respond within 3 business days.
  3. 3Once agreed, the authorised signatory at your institution signs the DPA. Auriga countersigns within 2 business days.
  4. 4A copy of the executed DPA is stored securely. School administrators can view DPA status in the Admin Compliance Dashboard.

SDPC National DPA

Auriga supports the Student Data Privacy Consortium (SDPC) National DPA framework. If your state or district participates in the SDPC, you may submit our DPA through the SDPC portal instead of signing directly. Contact us at schools@auriga.education to initiate an SDPC submission.

Questions About Our DPA

Contact our school partnerships team at schools@auriga.education or review our Student Privacy Pledge and Security Practices for additional context.