Security & Compliance

Your Data Is Safe With Us

We build with security and privacy at the core — especially because our users include young learners.

🔒
SOC 2 Type IICertified
🛡️
FERPA ReadyStudent data protected
🚫
No Data SellingWe never sell your data
🤖
Models UntouchedStudent data never trains AI
How We Protect You

Enterprise-Grade Security

🔒

Encryption at Rest & In Transit

All data is encrypted with AES-256 at rest and TLS 1.3 in transit. Your information is unreadable to anyone without authorization.

👆

Secure Authentication

Strong password policies, optional multi-factor authentication (MFA), and OAuth SSO support for schools and enterprises.

👥

Role-Based Access Control

Students, teachers, administrators, and district leaders each see only the data appropriate to their role.

📋

Regular Security Audits

Independent third-party security audits and penetration tests are conducted regularly to find and fix vulnerabilities.

🗄️

Backups & Disaster Recovery

Automated encrypted backups and a tested disaster recovery plan ensure your data survives any incident.

🙈

Privacy by Design

Data minimization, purpose limitation, and explicit consent are built into every feature from day one.

Compliance

Committed to Compliance

🛡️

FERPA

We support compliance with the Family Educational Rights and Privacy Act, protecting the privacy of student education records.

✅ FERPA-Ready
🧒

COPPA

For users under 13, we obtain verifiable parental consent and comply with the Children's Online Privacy Protection Act.

✅ COPPA Compliant
📄

CCPA

We honor California Consumer Privacy Act rights including access, deletion, and opt-out of data selling (which we don't do).

✅ CCPA Compliant
🛡️

SOC 2 Type II

Independently audited for security, availability, and confidentiality of system operations over an extended period.

✅ Certified
🤝

DPA / BAA

We execute Data Processing Agreements and Business Associate Agreements to formalize our data protection obligations.

✅ On Request
🌐

GDPR

For users in the EU, we comply with the General Data Protection Regulation, including data residency options.

✅ GDPR Compliant
Our Promise

Student Data Is Sacred

We have a simple, unwavering policy: we never use student data or activity to train our AI models. Your children's learning stays theirs — always.

  • Student data never used for model training
  • No targeted advertising to students
  • No selling of personal information
  • Full data export & deletion on demand
Request a Security Whitepaper
🛡️

Protected 24/7

Continuous monitoring, encryption, and access controls keep your data safe around the clock.

Need a Security Review?

Schools and districts can request our full security whitepaper, DPA, or speak with our security team directly.