Data Processing Addendum (DPA)

Last updated: February 2026

For institutions (universities, districts, and schools), DCM offers a DPA to formalize privacy, security, and contractual data processing obligations.

What the DPA covers

• Party roles (controller/processor) and permitted data use.
• Technical and organizational security measures.
• Subprocessor management and material-change notice.
• Assistance with access, export, correction, and deletion requests.
• Security incident notice obligations under applicable law/contract.
• Retention, return, and deletion at end of service.

Request process

To request a signed DPA or submit your institution's template, email legal@providencesociety.com with your institution name and legal contact.

If there is a conflict between a signed DPA and public site terms, the signed DPA controls.