EduTools is built and hosted in France to meet the requirements of schools and companies. Here are our concrete commitments on GDPR, technical security and audit-ready records.
No vague promises — precise technical and legal choices.
Servers and databases at OVH, in French datacentres. No replication outside the EU.
Minimal collection, explicit purposes, right of access and deletion at any time. French and European legal framework.
Storage and processing entirely within the EU. No transfer to non-European jurisdictions.
Your data and your learners' data are never sold, rented or shared for commercial purposes.
HTTPS everywhere, hashed passwords (bcrypt), CSRF protection, daily backups.
Internal, anonymous audience measurement — no Google Analytics, no third-party advertising tracker.
The principle is minimal collection: we only ask for what the platform needs to work. Specifically:
Email address, display name, password (hashed with bcrypt, never stored in clear text), pricing plan details. This data lets us manage the account and billing.
First name, last name and group — entered by the trainer at enrolment. Learners are never asked to create an account. This data supports individual progress tracking in private sessions.
Only a first name (typed by the participant) or a temporary “Guest-XXXX” identifier in anonymous mode. No identifying data is requested.
Attendance timestamps, quiz answers, chat messages (if the trainer enables chat), content posted on whiteboards and sticky-note walls. This data stays attached to the room and belongs to the trainer or the institution.
A visit counter per page, with no cookie and no user identifier — aggregate counters only. No third-party tool (Google Analytics, Meta Pixel, etc.).
EduTools relies on these providers to operate. All are contractually bound to comply with the GDPR.
| Provider | Role | Location | Data concerned |
|---|---|---|---|
| OVH | Hosting of the platform and the database | France 🇫🇷 | All application data |
| Stripe | Card payment processing | Ireland / EU 🇪🇺 | Email, amount, transaction identifiers (no card number on our servers) |
| PayPal | Alternative payment | EU 🇪🇺 | Email, amount, transaction identifiers |
Fonts are self-hosted on our servers: no request is sent to Google Fonts while you browse, and no visitor IP address leaves our infrastructure as a result.
EduTools is not a certification body — it is a teaching tool that makes the required evidence easier to produce during an audit. Specifically, the platform automatically generates and archives:
This data remains exportable and can be kept for as long as the regulation requires (typically 5 years). As a training provider, you remain responsible for the quality of your own audit file.
For the full legal detail.
Our team answers requests from training centres, schools and companies that need additional material (DPA, record of processing activities, security audit).
Contact us →