TOPdesk implements privacy improvements following SURF DPIA
Institutions can continue to use TOPdesk, according to SURF's DPIA. SURF identified 9 high risks and 3 low risks. TOPdesk has already mitigated 4 of the high risks and will mitigate the remaining high risks soon. TOPdesk is a service management platform used by...
TOPdesk
Security assessment pilot on Xedule completed
SURF Vendor Compliance has completed a security assessment pilot on Xedule. This assessment was a joint initiative that provided both parties with a great deal of relevant knowledge. Xedule Xedule...
Instructure enhances privacy features in Canvas LMS in collaboration with SURF
SURF has conducted a data protection impact assessment (DPIA) on Canvas LMS. Based on our advice, institutions can continue to use this learning management system. Mitigating measures have been agreed...
Enhanced privacy protections support the provisional recommendation to continue the use of Ans Exam
SURF and Privacy Company have completed a data protection impact assessment (DPIA) of Ans Exam B.V.’s SaaS assessment platform and API. Ans Exam is used by more than 20 Dutch...
Zoom is making progress in last mitigation steps from DPIA 2024
In April 2024, SURF published an updated DPIA on Zoom Education. The DPIA concluded that there were no more known high data protection risks. Zoom agreed to implement two extra measures...
Zoom
Privacy risks in Osiris addressed in collaboration with SURF
SURF has commissioned a data protection impact assessment (DPIA) on Osiris. The preliminary advice is that institutions can continue to use this student information system as long as they take...
OSIRIS
Privacy risks Microsoft 365 Copilot to orange
SURF advises education and research institutions to exercise caution when deploying Microsoft 365 Copilot. That is the conclusion of a new DPIA (Data Protection Impact Assessment) on Microsoft 365 Copilot....
Microsoft
DPIA EduGenAI - working on safe and responsible AI in education
Together with Npuls, we are working on EduGenAI: a platform that enables the safe and responsible use of generative AI in higher education. Already at this stage of development, we...
Xedule uses SURF DPIA to further strengthen its privacy policy
SURF conducted a Data Protection Impact Assessment (DPIA) on Xedule, a cloud-based solution for planning and scheduling processes in education. We identified 17 high risks and 1 medium risk. Xedule...
The DPIA on EduGenAI will be published on September 1, 2025
The use of AI in education is a current topic. In Npuls, a privacy-friendly AI solution for educational institutions is being developed as an alternative to commercial generative AI solutions:...
