Data Processing Addendum

Purpose

This page summarizes the core data processing commitments we are prepared to include in a signed Data Processing Addendum. It is not a substitute for a fully executed agreement where one is required by law, policy, or procurement.

Processing instructions

We process customer data only on documented customer instructions, as needed to provide and support the service, or as otherwise required by applicable law.

Confidentiality and security

• Personnel with access to customer data are expected to be bound by confidentiality obligations.
• We maintain reasonable administrative, technical, and organizational measures designed to protect customer data.
• We limit access to customer data based on role and operational need.

Subprocessors

We may engage subprocessors to host or support the service. We remain responsible for their processing to the extent required by applicable law and contract, and we expect them to operate under appropriate data protection obligations.

Assistance and deletion

On request and where reasonably possible, we will assist the customer with data subject requests, security questions, deletion requests, and return of customer data at the end of the service relationship, subject to legal obligations and backup retention constraints.

Requesting a signed addendum

If your school or district needs a signed DPA, contact admin@infinitysolutions.app with your organization name, deployment scope, and procurement contact details.