← Back to the register
DPA-2026-01 · Schedule A

Data Processing Agreement.

Summary

UniRubric's data-protection commitments as a Processor for the contracting institution. Names the documented processing instructions, the lawful basis for each processing activity, the cross-border-transfer position under Australian Privacy Principle 8, the GDPR Article 28 equivalence for EU and EEA-aligned reviewers, the breach-notification commitment, and the sub-processor approval mechanism. Aligned with the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme.

Request the full document

The full draft is shared at Due Diligence under non-disclosure with parties evaluating UniRubric for institutional contract. Submit a short request and a member of the team will be in touch within one business day.

UniRubric operates a documented set of contracts, schedules, registers, and policies. Drafts are continually maintained and updated against the Privacy Act 1988 (Cth), the Higher Education Standards Framework 2021, and the Australian Cyber Security Centre’s Essential Eight. All documents are subject to in-house counsel review by the contracting institution.