Security & Privacy

How we protect your school's information

Our Commitment

We understand that schools handle sensitive information. That's why security and privacy are built into every layer of our platform—not bolted on as an afterthought.

What We Collect

Account Information

Email address and organization affiliation for authentication

School Information

School name, location, grade levels, and enrollment range

Documents

The institutional documents you upload for analysis (policies, plans, governance materials)

What We Don't Collect

Our platform is designed for institutional documents, not student records. We do not collect:

Student names or identifiers
Student grades or test scores
Staff employment records
Parent or guardian information
Social security numbers
Health or financial records

Infrastructure Security

🔐

Encryption in Transit

All data transmitted using TLS/HTTPS encryption

💾

Encryption at Rest

Data stored with Google Cloud's encryption (AES-256)

🏢

Enterprise Infrastructure

Hosted on Google Cloud Platform with SOC 2, ISO 27001 certifications

🔑

Access Controls

Role-based access with organization isolation—your data is only accessible to your team

AI Processing & Your Data

We use Anthropic's Claude API to analyze your documents. For details on which models we use and why, see our AI Transparency page.

Not used for training. Your documents are never used to train AI models.

Limited retention. Data is retained only for abuse monitoring (up to 55 days), then deleted.

Google as processor. Google acts as a data processor, not a data controller—they can't use your data for their own purposes.

Education Privacy Compliance

FERPA

We can serve as a "school official" with legitimate educational interest. We recommend schools upload institutional documents (policies, plans) rather than student records. Data Processing Agreements available upon request.

COPPA

Our service is designed for adult school administrators, not children. We do not collect information from students.

State Laws (SOPIPA, NY Ed Law 2-d)

We comply with state student privacy laws. We never sell student data, use it for advertising, or build profiles for commercial purposes.

Your Rights

Access

Request a copy of your data

Correction

Update inaccurate information

Deletion

Request deletion of your data

Export

Receive your data in a portable format

Questions?

We're happy to discuss our security practices or provide documentation for your district's review.

Contact us at: info@schoolqualityreview.ai

Ready to get started?

Get Started