The EU-US Data Privacy Framework, explained for vendor reviews
Solomon Amos · 7 Sep 2026 · 10 min read
Regulatory evidence
AI-powered platform giving institutions the assessment data, accreditation evidence, and student retention signals needed to make learning
For each regulation, how many of the requirements it places on your vendors Digication’s public evidence reaches. Open one for every item with its date and source.
What the vendor lists, typed; public items can be read now, the rest are available on request.
4 documents listed on Digication’s trust centre
trust.digication.comAnswers the vendor publishes to questions buyers ask, quoted with the link to where it says so.
Where data is hosted or processed
Where is Digication's infrastructure hosted?
“Our infrastructure is hosted on Amazon Web Services (AWS) in the United States, providing enterprise-grade security, reliability, and compliance capabilities.”
Regions named: USas of 21 Sep 2026Source
Data retention and deletion
How long does Digication retain customer data?
“Data retention periods depend on the type of data and applicable legal requirements: - Active account data: Retained while accounts are active - Inactive account data: Retained according to institutional agreements - Deleted account data: Purged within 90 days of deletion request - Backup data: Retained for disaster recovery (automatically purged on rolling basis) - Data following contract termination: deleted wit...”
as of 21 Sep 2026Source
Data retention and deletion
Can users request deletion of their data?
“Yes, in accordance with GDPR and other privacy regulations, data subjects have the right to request deletion of their personal data. Submit deletion requests to [email protected]. Institutions should contact us to coordinate student data deletion in compliance with their own policies.”
as of 21 Sep 2026Source
Data retention and deletion
Is my data safe from accidental deletion?
“Yes. We employ a "Defense in Depth" approach to data safety. We enforce strict "Deletion Protection" on our databases to prevent accidental termination and utilize "Versioning" on our file storage systems to preserve a history of all changes. This ensures that even if a file is overwritten or deleted, the prior version remains retrievable for the versioning retention period (30–90 days depending on the bucket).”
as of 21 Sep 2026Source
Notice of subprocessor changes
Will Digication notify customers of subprocessor changes?
“Yes, we maintain an updated subprocessor list on our Trust Center and will notify institutional customers of material changes to our subprocessor arrangements.”
as of 21 Sep 2026Source
Solomon Amos · 7 Sep 2026 · 10 min read
CertReports Research · 18 Sep 2026 · 12 min read
This maps third-party obligations to the vendor evidence that may support them. It is not legal advice and never a statement that a vendor or its customers comply; confirm scope and sufficiency with your counsel or auditor. “No public evidence” means nothing public was found at the last check. Citations link to the official text.