Vera Edu Privacy Policy

At Vera Edu, safeguarding minors, protecting student academic records, and maintaining institutional trust is the cornerstone of our technology. This policy details how educational data is processed in full compliance with the EU GDPR (Regulation 2016/679) and regional educational standards.

Effective Date: October 2026
GDPR & EU Data Regulation Compliant
Version 2.4 · Enterprise Master Standard

1. Educational Scope & Regulatory Framework

This Privacy Policy applies strictly to the Vera Edu platform (accessible via web and progressive mobile applications), including the Student Portal, Teacher Dashboard, Family/Parent Portal, and Institutional Administration Console.

Vera Edu is engineered to comply with the European Union General Data Protection Regulation (EU GDPR 2016/679), the Italian Personal Data Protection Code (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018), and international educational confidentiality guidelines (including FERPA/COPPA principles where applicable).

2. School as Data Controller & Vera Edu as Data Processor

Legal Distinction (Article 28 GDPR): The subscribing educational institution (school, technical institute, or academy) is the Data Controller responsible for determining the purposes and legal grounds for processing educational data. VeraPiù / Vera Edu acts strictly as the Data Processor, processing data solely on behalf of and according to documented instructions from the institution.

Each institution signs a dedicated Data Processing Agreement (DPA) with VeraPiù prior to deploying class rosters and staff credentials.

3. Student & Minor Data Safeguards

We recognize the exceptional sensitivity of processing data regarding underage students. We enforce strict data minimization:

  • Identity Information: Student full name, institutional email, assigned class roster, and unique school identification code.
  • Parent / Guardian Association: Contact information of parents/guardians directly verified and linked by the school administration.
  • Parental Consent (GDPR Art. 8): Subscribing schools manage and verify parental authorizations for minor access in accordance with national education regulations.

4. Academic Records & Digital Registro di Classe

Data entered into the Digital Registro di Classe constitutes official institutional records:

  • Evaluations & Grades: Formative and summative marks, teacher comments, and scrutiny deliberations.
  • Attendance & Justifications: Daily absences, late arrivals, early dismissals, and parental digital justifications.
  • Disciplinary Notes & Commendations: Behavior marks and official notices issued by authorized teachers.

Every record modification is timestamped and recorded in immutable audit logs to safeguard academic integrity.

5. In-Platform Communications & Circulars

Messages exchanged between teachers, students, and families via Vera Edu internal chats and circular notices are private institutional communications. They are strictly segregated between class groups and verified direct channels.

6. Strict Zero Advertising & Commercial Profiling Guarantee

Our Absolute Privacy Pledge:

Vera Edu does NOT display advertising, does NOT build behavioral or commercial student profiles, does NOT sell, rent, or trade student personal records to third parties, and does NOT use student data to train public commercial artificial intelligence models.

7. Sub-processors & EU Data Sovereignty

All educational production databases and backup archives are hosted exclusively within the European Union (Frankfurt, Germany / Milan, Italy regions via certified cloud infrastructure providers Supabase and Vercel with ISO 27001, SOC 2 Type II certifications).

8. Academic Year Retention & Offboarding

Educational records are retained for the duration of the school year contract. At the conclusion of institutional service, the school administration receives complete digital exports, following which tenant databases are permanently purged within 90 days.

9. Parental & Student Rights

Parents and authorized guardians retain full rights to inspect, review, and request correction of their child’s academic records. Because the school is the Data Controller, rights requests should be addressed directly to the school principal or secretariat, who can execute updates via the Vera Edu Admin console.

10. DPO & Institutional Contact

For educational data protection questions or inquiries regarding our institutional Data Processing Agreement:

Vera Edu Data Protection Office: dpo@verapiu.com

Institutional Support: edu@verapiu.com

Parent Company: VeraPiù / KSMM Holding

VeraPiù Legal & Data Protection Office

For formal data subject requests, law enforcement inquiries, or customized Data Processing Addendums (DPA) for your school or enterprise:

General Legal Counsellegal@verapiu.com
Data Protection Officer (DPO)dpo@verapiu.com