Data Processing Addendum (Institutions)
This DPA applies when an institution (“Controller”) uses AfyaIndex as a Processor for staff accounts and usage analytics.
Scope
Processing of staff identity, seat assignments, and service logs for the duration of the institutional subscription.
Security
Access controls, encrypted transport (HTTPS), hashed passwords, and audit logging of administrative actions.
Sub-processors
Hosting provider, SMS gateway, payment gateway. List available on request.
Contact
dpo@afyaindex.local for institutional privacy inquiries.