Hosting, Infrastructure and Data Protection

Protecting user data and ensuring reliable service operation are central priorities for our platform. This page explains where our services are hosted, how data is processed, and what measures we take to ensure privacy and security.

Server Hosting

Our platform is hosted on servers located within the European Union. All infrastructure is operated by established cloud providers that comply with European data protection regulations (GDPR).

Hosting within the EU ensures that all user data is processed under European data protection law.

Data Processing and GDPR Compliance

When schools or organizations use our platform, personal data may be processed on their behalf. In these cases, we act as a data processor according to Article 28 of the General Data Protection Regulation (GDPR).

To formalize this relationship, we provide a Data Processing Agreement (DPA).

Types of Data Processed

Depending on how the platform is used, the following types of data may be processed:

  • Account information (e.g. name, email address)

  • User-generated content (e.g. learning materials, answers, submissions)

  • Technical data required for operating the platform (e.g. log data)

We process only the data necessary to provide and maintain the service.

Data Storage and Security

We implement multiple technical and organizational measures to protect user data, including:

  • encrypted connections (HTTPS / TLS)

  • secure server infrastructure

  • restricted access to production systems

  • regular security updates

  • monitoring and logging for operational security

Access to personal data is limited to what is strictly necessary to operate and maintain the platform.