Data Processing Agreement

This Data Processing Agreement (“DPA”) applies when PM Structure processes personal data on behalf of a business customer under a written services agreement (e.g. cohort licensing or corporate pathway access).

The customer is typically the controller for learner and employee data. We act as processor and process personal data only on documented instructions to deliver the contracted service.

We implement appropriate technical and organisational measures, including access controls, encryption in transit where supported, and subprocessors vetted for security. See [Security](/legal/security).

Customer authorises use of subprocessors listed at [/legal/subprocessors](/legal/subprocessors). We provide notice of material changes via this page and the privacy policy last-updated date.

We notify the customer without undue delay after becoming aware of a personal data breach affecting customer data, with information required to meet the customer’s regulatory obligations.

Upon reasonable request and subject to confidentiality, we provide information necessary to demonstrate compliance with this DPA, supplemented by security documentation where available.

Email support@pmstructure.com with your entity name, registered address, scope of processing (learner count, regions, duration), and the services agreement reference. We will provide a countersigned DPA where applicable.

For questions about enterprise data processing, email support@pmstructure.com with your region and order email if applicable.