Legal & Compliance
Data Processing Agreement
CyberPrimer’s standard DPA governs organization-controlled workforce information when CyberPrimer processes that information to provide the service. The execution-ready agreement is available to eligible organizational customers on request.
Last reviewed August 8, 2026Processing roles
The customer determines the purpose, authorized workforce population, configuration, and lawful basis for organization-controlled data. CyberPrimer processes that data to provide authentication, training, assessments, evidence records, support, security, and customer-directed administration, subject to the applicable service agreement.
Customer instructions
The customer must provide lawful documented instructions, required workforce notices, accurate enrolment data, and authorized manager contacts. CyberPrimer does not use customer-controlled employee records for unrelated advertising or sell that information.
Security and confidentiality
CyberPrimer applies organization isolation, role-based authorization, security logging, controlled deletion and recovery workflows, encrypted transport, and restricted administrative access. Personnel and service providers are limited to the information required for their authorized functions.
Subprocessors
Current service categories include hosting and storage, Stripe for payment processing, Resend for transactional email, and Microsoft 365 for business communications and support operations where applicable. A finalized DPA identifies the applicable providers, processing details, and change-notification process.
Requests, incidents, and deletion
CyberPrimer assists organizational customers with verified data-subject requests, security-incident response information, export, return, and deletion as specified in the executed DPA and applicable service terms. Operational retention periods and incident-notification commitments must be completed in the signed agreement.
Request an agreement
An authorized customer representative may request the current execution-ready DPA at admin@insightbiztech.com. The agreement must be completed and accepted before it is relied upon as a contractual data-processing commitment.