GDPR coaching software

Exantur processes only what is necessary to run the service, under the GDPR. Data is never sold, used for advertising, or shared with third parties beyond what is strictly required to provide the service.

For the coaching data your organization enters, session notes, goals, check-ins, assessment results, you are the data controller and Exantur is the processor. A Data Processing Agreement sets that relationship out, is available on request, and can be downloaded from the DPA page. No software can make your practice GDPR-compliant on its own: Exantur provides the contractual and technical building blocks, and you remain responsible for how you use them.

Individual coachees can request a full export of their personal data or permanent deletion of their account and all associated data. Deletion flows exist for both individual coachees and entire organizations, with a grace period that allows error correction before permanent, irreversible deletion.

The GDPR is the legal frame; two things underpin it that this page keeps deliberately short. Where the data physically lives is a residency question, covered on our EU-hosted coaching software page. How access to it is technically enforced, database-level row-level security, encryption and MFA, is covered on our secure coaching software page. Here we stay on the obligations, rights and agreements.