Procurement · Privacy

DPA procurement pack

Ready-to-attach documents for your privacy officer and procurement team. Pre-filled for a product that collects no student PII during curriculum use. The one exception, an optional grades 9–12 week-1 log, is listed in Exhibit E.

Privacy officer contact

DPA templates, Exhibit E questions, security questionnaires: privacy@contact.schoolhouse.space

Or use the contact form →

Downloads

DPA Readme — start hereHow to use this pack, SDPC NDPA signing process, and five-business-day turnaround.
Download PDF
Exhibit E — Data Elements (pre-filled)SDPC-style inventory. One optional student submission (grades 9–12 week-1 log); every other student row: Not collected.
Download PDF
Data Flow StatementArchitecture narrative, the one student data path, retention, deletion and 30-day breach notice.
Download PDF
Sub-processor ListVercel, Supabase, Resend, Slack, Cloudflare, Upstash, Google Fonts — purpose, location, certifications.
Download PDF

Privacy officer checklist

  • Download Exhibit E and Data Flow Statement for your vendor file
  • Confirm with your privacy officer: student data is limited to the optional week-1 log in Exhibit E
  • Email your DPA / SDPC NDPA template to privacy@contact.schoolhouse.space
  • Include division name and agreement version (e.g. NDPA v2.x + Virginia addendum)
  • We aim to return a signed agreement within five business days

SDPC National Data Privacy Agreement

We will sign your division’s DPA and are prepared to execute the SDPC National Data Privacy Agreement (NDPA) — including Virginia and other state addenda — through the Student Data Privacy Consortium.

Because Exhibit E has one optional student submission and every other student row is “not collected,” review is typically faster than student-data-heavy vendors.