Related: Terms of Service · Privacy Policy · AI Transparency
Where Lingu processes personal data on behalf of a customer organisation, that processing is governed by a Data Processing Agreement (“DPA”) that meets Article 28 of the UK GDPR and the EU GDPR. The DPA sets out the subject matter and duration of processing, the nature and purpose of processing, the categories of data subjects and personal data, the security measures, sub-processor terms, international transfer safeguards, audit rights, and the return or deletion of data at the end of the contract.
When an organisation buys seats, licences, white-label or co-branded training, or connects Lingu to its own systems, Lingu Ltd (company number 09197891) acts as data processor for the learner data the organisation provides or controls, including progress reports and learning activity exports. The organisation is the data controller.
Under our Data Processing Agreement we:
We remain controller only for our own billing records, platform security and error monitoring, and statistics that do not identify individual learners. For learners who buy from us directly, Lingu Ltd is the controller, as described in the Privacy Policy.
Our platform is operated by our parent company Lingu AS (Norway, organisation number 912 774 031). We also use carefully selected sub-processors in these categories: hosting and data storage; content delivery and network security; live video and audio; AI models for practice, feedback and support; payment processing; email and messaging; customer support tools; and error monitoring.
The current list, with each sub-processor’s purpose and location, is available to customers and users at app.lingu.com/data_processors (sign in required). Organisations evaluating Lingu can request it at hello@lingu.com.
We give business customers at least 30 days’ notice before adding or replacing a sub-processor, and they may object.
Our Data Processing Agreement is available on request at hello@lingu.com. It includes the UK International Data Transfer Addendum and the EU Standard Contractual Clauses where needed.
If you have a question about the DPA, for example as part of procurement or data protection due diligence, use the form below or email hello@lingu.com. See also the Legal & compliance centre.
Use this form to ask about the DPA or request access for procurement or data-protection due diligence. We will reply by email.