🔒 Security, privacy and compliance
Where to find our Trust Centre, Data Processing Addendum and privacy documents.
Your school owns its data. Komodo acts as the data processor and your school is the data controller, so we only process data on your behalf to deliver Komodo.
Key documents
- Trust Centre: our security and compliance information, policies and controls. Request access with your school email.
- Data Processing Addendum (DPA): how we process personal data for your school.
- Privacy Policy: how we collect and use personal information.
- Master Terms and Conditions: the terms of your Komodo subscription.
In brief
- Data is encrypted and stored on Google Cloud servers. The region depends on how your account is set up.
- We don't share personal data with third parties, except approved subprocessors bound by the same privacy standards.
- When your agreement ends, your data is deleted or returned, as your school prefers.
- Student responses are confidential. Only staff with pastoral responsibility for a student see their answers. Parents have no access.
Security questionnaires and data requests
Many answers are in the Trust Centre. For a security questionnaire, a data subject request or anything else, use the Get support form.
