Legal

Data processing agreement framework.

A school-ready DPA outline for controller/processor roles, security measures, subprocessors, retention, deletion, and incident notice.

Free athlete profiles Verified coach command Source-backed evidence Track/XC standards engine

What you can do here

Prepare institutional contracting review.

Roles

Define school, coach, family, and MarkSet responsibilities by data source.

Security

Access controls, encryption posture, audit logging, and least privilege.

Lifecycle

Retention, deletion, export, subprocessor notice, and incident response.

Sensitive channels

SMS messaging, athlete contact data, family controls, and deferred video storage require explicit treatment in the order form or DPA before broad production use.

Who MarkSet is for

Schools, departments, procurement, and counsel

Questions coaches ask

Is MarkSet the controller or processor?

It depends on source and workflow; the DPA defines each processing role before production deployment.