Prepare the framework with your school.
Updated: 19 September 2026. Contact: aios.educ@gmail.com.
Document status
This page presents the terms to agree between AMABY PROJECT MANAGEMENT - FZCO (AIOS), processor, and the school, controller of school processing. It is not a signed DPA and does not replace its annexes. Regions, enabled providers, retention periods and deadlines must be confirmed before signing.
Processing scope
The service processes school identity, access, resources, work, results, learning signals and communications necessary for authorised features. Data subjects are students and staff; family information should be submitted only where necessary and authorised. Operations include storage, access, AI assistance, return and deletion.
Instructions and confidentiality
The agreement must define documented school instructions, confidentiality for authorised personnel, usage restrictions and the procedure for unlawful instructions. School data must not be reused for commercial purposes unrelated to the service.
Security and assistance
The security annex must describe measures actually deployed: role and school authorisation, session protection, file access checks, backups, incident handling and verification. Assistance with rights, impact assessments and audits must be defined. Unestablished certifications or penetration tests cannot be presumed.
Providers and transfers
The annex must identify Vercel, Supabase and every AI provider actually enabled, with its role, processing locations, safeguards and retention terms. It must address client notification of changes and objection procedures. Software support for a provider does not prove it is enabled.
Incidents and contract end
The contract must provide for breach notification without undue delay, its contact and available information, and data return or deletion at the school’s choice, subject to legal obligations. Operational deadlines, backup handling and execution evidence must be agreed. Deadlines proposed in brackets in the original template are not confirmed commitments.
Request the agreement
Write to aios.educ@gmail.com to establish the DPA and annexes with your school’s settings. Liability, audit and applicable-law terms must be aligned with the main contract.