Data processing agreement

These terms apply where a university or organisation (the controller) uses pecan (the processor) for its learners.

Scope

We process learner account details and simulation activity only to provide the service and as instructed by the controller.

Security

Data is encrypted in transit, access is restricted to authorised personnel, and each user can only access their own records.

Sub-processors

We use trusted hosting and AI providers to run the platform. A current list is available on request.

Deletion

On termination, controller data is deleted or returned on request. A signed agreement can be provided for pilots.