Data Processing Agreement (DPA)
Last updated: 2026-04-13
SkillGround AB provides a Data Processing Agreement (DPA) in accordance with GDPR Article 28 for customers who require one.
1. Scope
This DPA applies when SkillGround processes personal data on behalf of the customer in connection with the delivery of platform services (Animate, Build, Launch) and production services (Studio).
2. Type of Processing
SkillGround processes personal data in the following contexts:
- User data in the platform (name, email, course progress)
- Training content that may contain personal data
- Analytics data for course statistics
3. Technical and Organisational Measures
SkillGround implements the following security measures:
- -- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- -- EU-based hosting (GCP europe-north1, Finland)
- -- Access control with role-based permissions
- -- Regular backups
- -- Incident response process with 72-hour notification period
4. Sub-processors
SkillGround uses the following sub-processors. Customers are notified before new sub-processors are engaged:
| Google Cloud Platform - Hosting and infrastructure - Finland (EU) |
| Firebase (Google) - Authentication and database - EU |
| Anthropic - AI services - USA (EU Standard Contractual Clauses) |
| Auth0 (Okta) - Authentication - EU/USA (EU Standard Contractual Clauses) |
| IBM Cloud - AI and cloud services - EU/USA (EU Standard Contractual Clauses) |
| Google Translate - Translation services - EU/USA |
| ElevenLabs - Voice synthesis - EU/USA (EU Standard Contractual Clauses) |
| OpenAI - AI services - USA (EU Standard Contractual Clauses) |
5. Download Full DPA
Contact us at dpa@skillground.com to receive the full Data Processing Agreement in PDF format.
Contact Us for DPAFull agreement provided after contact.