School Service Agreement
Review framework for school subscriptions, responsibilities and data processing.
Purpose
This agreement describes the commercial and operational relationship between STONECODE and a subscribing school. Schools should retain an accepted copy for their records.
School responsibilities
The school must identify authorised administrators, provide lawful instructions, maintain accurate records, protect access credentials, manage student and parent notices, and notify STONECODE of suspected incidents without undue delay.
STONECODE responsibilities
STONECODE will provide the contracted service, apply role and tenant controls, maintain reasonable security safeguards, support incident investigation, use subprocessors under an approved process, and assist with rights requests within the agreed scope.
Data processing instructions
The school agreement must identify the school and platform roles, permitted processing, data categories, security measures, authorised personnel, approved providers and transfers, incident contacts, rights-request assistance, retention, export and deletion at termination. No school should upload student records until its authorised representative has accepted the final agreement.
Subscription and PINs
The annual school plan includes the published entitlement of 20 free PINs for the subscription period. Additional PIN purchases, payment verification, allocation and expiry are subject to the checkout terms and platform records.