# Educational data arrangement — preparation document

Version: 2026-10-13-permissions-v1. Available to instructors/institutions through TAIF support, info@taiflab.org. This document is not an executed agreement and does not give an individual instructor authority to bind a university. Complete the actual parties, authority, processing roles, instructions and applicable local arrangements before relying on an institutional processing agreement.

TAIFLab is operated by Stephen Coetzee and Astrid Schmulian in partnership in South Africa. The authorised counterpart must identify the class, educational purpose and documented instructions. An institution ordinarily determines educational record purposes where it authorises institutional use; TAIF processes those records under the agreed instructions. TAIF retains its own responsibilities for educator accounts, service administration, security and support. Direct professional adoption requires an explicit assessment of the actual allocation of responsibilities; a checkbox is not a substitute.

The service administers instructor-led assessment, team/individual membership, questions, answers, attempts, immediate feedback, marks and optional Think First/reflections. Identified participation uses names and protected institution-issued identifiers; Privacy mode holds neutral labels and a shared result while the instructor keeps mappings outside TAIF. Technical sessions, security records and minimal acceptance evidence are also processed. Student accounts, compulsory DOBs and parental-document uploads are not part of this release.

The counterpart must arrange required institution approval, learner permission, required parent/guardian processing permission and any separately required Terms acceptance before supplying information or starting participation. Keep evidence securely outside TAIF and make necessary evidence available on a legitimate review. General school/children’s self-service use is outside this service; unusually young higher-education learners require prior case review.

Cloudflare supplies the current Workers/D1/KV/Images/Turnstile/email and network infrastructure. The current disclosed production D1 primary region is Western Europe; supporting services may process globally. Document applicable provider terms, subprocessors and international-transfer arrangements for the actual use. Region alone is not a transfer guarantee, and TAIF does not claim Perusall’s arrangements or certifications.

Controls include educator authentication, role-scoped access, encrypted learner identifiers and keyed lookup, masked ordinary displays, restricted identifier exports, token/controller controls, versioned legal evidence and operator class holds. There is no guarantee of irreversible anonymity. Security/privacy incidents are reviewed with authorised parties; agree contact details and notification responsibilities without inventing guaranteed response times.

Document the retention schedule, requests process, export recipients, deletion instructions and exit arrangements. Active/archived class records currently remain until authorised deletion; minimal class acceptance evidence follows the class. Class deletion removes class-scoped records. Recovery copies follow the applicable D1 recovery window. External downloads/mappings remain under their holders’ control. A class hold is a restriction, not erasure; targeted erasure needs a tested scoped procedure and must preserve unrelated shared results. Holds/deletions must be reapplied before restored records become usable.

Record the approving parties, authority, applicable jurisdiction, processing basis and roles, required learner cases, transfer basis, retention periods, support contacts, documented instructions, effective date and signatures in the actual agreement. Contact TAIF to settle these matters. No subscription, procurement contract, institutional endorsement, registered officer or universal compliance certification is implied by this preparation document.