Procurement & contracting

We buy ict and content on the best possible terms and make sure you can use it easily. We also support you in procurement processes we carry out jointly for institutions.

Close-up handen man achter laptop met bomen en planten op de achtergrond

SURF DPIA flags 14 high risks in Qualtrics DesignXM

News

SURF has identified 14 high risks and one low risk in its Data Protection Impact Assessment (DPIA) on Qualtrics DesignXM, a market research and experience design platform.

News

DPIA on Nextcloud Enterprise software: 15 low or solved risks

News

SURF and Privacy Company have jointly conducted an umbrella Data Protection Impact Assessment (DPIA) on self-hosted Nextcloud Enterprise, open-source collaboration software. After negotiating an…

News

AFAS and SURF are taking the next step together following the DPIA

SURF has carried out a Data Protection Impact Assessment (DPIA) on AFAS’s Profit, an all-round HRM and payroll system. A DPIA is a tool for identifying privacy risks to data subjects, such as users.

News 02 July 2026

Trappenhuis met lopende studenten

Update to Data Protection Impact Assessment (DPIA)

Privacy risks Microsoft 365 Copilot remain ‘orange’ despite improvements

SURF continues to advise educational and research institutions to exercise caution when deploying Microsoft 365 Copilot. Although Microsoft has made improvements to the AI assistant since SURF first…

News 27 May 2026

Man knielt bij kluisje op de UvA

SURF completes DPIA for Adobe Creative Cloud and Document Cloud for Education

SURF and Privacy Company have conducted a Data Protection Impact Assessment (DPIA) on Adobe Creative Cloud and Document Cloud for Education. SURF confirms that institutions may continue using these…

News 16 February 2026

studenten aan het werk aan ronde tafels

TOPdesk implements privacy improvements following SURF DPIA

Institutions can continue to use TOPdesk, according to SURF's DPIA. SURF identified 9 high risks and 3 low risks. TOPdesk has already mitigated 4 of the high risks and will mitigate the remaining…

News 15 January 2026

three students are sitting on the floor and engaged in conversation.

Instructure enhances privacy features in Canvas LMS in collaboration with SURF

SURF has conducted a data protection impact assessment (DPIA) on Canvas LMS. Based on our advice, institutions can continue to use this learning management system. Mitigating measures have been…

News 18 December 2025

four female students are smiling on their laptops

SURF Inkoop Connect

Conference

Gooiland, Emmastraat 2, 1211 NG Hilversum

27 Oct

Workshop Privacy Risks & Assessment

Workshop

SURF Utrecht, Moreelsepark 48

9 Oct