Legal
Data Processing Information
Last updated: October 2026
1. Roles
For student and staff records uploaded to the platform, the institution acts as data controller and Turaminds acts as processor, handling data only on the institution's documented instructions.
2. Categories of data
Student identity and enrollment details, guardian contacts, attendance records, assessment results, fee records and staff account information, as configured by the institution.
3. Purpose of processing
Providing platform functionality: records management, assessments, attendance, fee tracking, communication workflows, analytics and enabled AI features.
4. Sub-processors
We use infrastructure and service providers to host and operate the platform. A current list will be published here and customers will be notified of material changes.
5. Security measures
We aim to apply role-based access controls, encrypted connections and appropriately configured infrastructure. Specific technical measures will be documented as they are verified.
6. Data subject requests
We will assist institutions in responding to access, correction and deletion requests relating to data they control.
7. Return and deletion
On termination, institutions may export their data. We will delete customer data within a defined period unless retention is legally required.
8. Data processing agreement
Enterprise customers can request a formal data processing agreement through the contact page.