GDPR and WCAG compliance built in from day one. 

Azorus CRM has been developed specifically to manage millions of data subjects across the EU and the UK to ensure their rights are respected and can be exercised correctly. This impacts not only features, but also training, development, data processing, policy, and retention. 

Features

Azorus ensures that Consent collection is straightforward, yet flexible. Universities can also rely on Legitimate Interest or Contract as legal grounds for processing data. Students can easily manage their consent and have the ability to object to processing based on Legitimate Interest.

When data comes from third-party sources such as education fairs, peer-to-peer chats, or lead websites, notifications can be automatically triggered, keeping universities informed in real time.

Privacy statements are fully trackable: revisions are stored, and acceptance records include dates. This gives you full visibility of consent history and allows notifications to be sent if significant changes occur.

Most importantly, multiple safeguards ensure that students only receive communications they are entitled to. Even if an administrator selects the wrong audience, only those who have opted into a specific topic will have the chance to receive it, alongside other protective measures.

Training

Azorus supports new administrators with GDPR compliance every step of the way. Our wiki includes dedicated GDPR sections for both new and experienced university clients, helping teams make the most of opt-ins while also making it easy for students to exercise their rights, whether that’s accessing their data or requesting to be forgotten.

Our expertise in pseudonymisation and data deletion is especially valuable. For universities, these tasks may happen only once a year, but for Azorus, they are routine projects. This experience ensures your university gets it right the first time.


Development & Data processing

Azorus follows a privacy-by-design approach, as recommended by GDPR. This includes performing Data Privacy Impact Assessments (DPIAs) for new features and consulting independent GDPR experts to ensure impartial compliance guidance.

Our development processes follow strict security standards, including ISO practices, to keep the product safe and secure.

We also carefully consider where data is stored and processed, both internally and with sub-processors or partners, to maintain full compliance and protect sensitive information.

Policy 

Azorus develops and maintains comprehensive GDPR documentation to support its role of managing millions of data subjects across the EU and UK on behalf of universities. This includes compliance with Article 27, policies for data retention, disaster recovery, information security, and cryptography, as well as procedures for supplier management, data breaches, emergency contacts, risk assessments, and more.

Retention

Universities have precise control to pseudonymise and/or delete data. This ensures older records can be retained for tracking purposes, while minimising risk to individual students.