Your DPA, countersigned in three to ten business days.
We sign the SDPC Universal DPA, the nine major state DPAs, and district-drafted templates — with published turnarounds so your procurement timeline is never the thing waiting on us.
Four paths in. Each one has a published SLA.
Pick whichever your district already uses. The SDPC Universal DPA is the fastest and the one most districts prefer; state and district templates just take a little longer because counsel actually reads them.
What a standard Growing Standard DPA actually says.
No surprises at the table. These are the eleven terms counsel usually looks for first — purpose, data elements, subprocessors, retention, breach notification, insurance, and the rest — written out the way we'd want to read them.
Email us. We reply within one business day.
Send your school or district name, state, and preferred template to privacy@potatoclass.com. Attach the template you want us to review, or ask us to send our standard SDPC-based DPA. We return a signed copy or a redlined counter-proposal within the SLA above, then exchange the final document with your procurement team and move to contract.
We sign most school and district DPAs as-written. These are the exceptions.
On liability caps, we accept 2× annual contract value — the industry standard. On audit scope, Growing Standard LLC has not pursued SOC 2 Type II certification of its own application layer. We will engage an auditor when a customer contract requires it or when revenue justifies the engagement. In the interim, we offer the DPA, HECVAT-Lite self-assessment, quarterly admin-access reviews, a documented incident-response runbook, and a multi-state privacy addendum (CA, NY, IL, TX, CO, CT, NJ, MD, WA) in lieu of an on-site audit wherever possible. On indemnification, we ask for mutual indemnity rather than one-way. And on data export format, we provide CSV/JSON — if your school or district requires a proprietary format, we'll need to scope it.
Send us your template.
Email privacy@potatoclass.com with your DPA (or request ours). We reply within one business day with next steps, and the full context lives in our plain-language privacy summary and the full privacy policy.