Security & privacy
Built for the trust a school extends.
You're handing us minors' records. Isolation, encryption, and a binding public agreement are the starting point, not an afterthought.
Built for student-data privacy.
You're trusting us with minors' records. We designed for that from the first table, rather than bolting a policy on at the end.
Your data stays yours
Every student record, score, and report remains under your academy's control. We never sell it, and we honor verified export and deletion requests under the DPA.
Isolated per academy
Each academy's data is walled off from every other tenant, enforced in the database itself and not just the interface. Your students are never visible to another school on the platform.
Encrypted, role-scoped access
Every record is encrypted in transit and at rest. Staff see only what their role allows, and students see only their own work.
Backed by a binding agreement
Our public Data Processing Agreement is incorporated into the Terms automatically. It limits use to your authorized program, sets deletion timelines, identifies subprocessors, and requires prompt breach notice.
Made for minors
No advertising, no trackers monetizing students, and collection from younger students only for the school-authorized educational purpose or with parental consent where required.
Wherever you teach
The DPA provides contractual controls designed to support customers' obligations under FERPA, COPPA, GDPR, UK GDPR, and Korea's PIPA, where those laws apply.
Our Privacy Policy and Terms spell out the details. The DPA is binding automatically, and a countersigned copy is available on request.
Read the DPA before you talk to us.
Our Data Processing Agreement is public, not gated behind a form. Read it, bring your questions to a 15-minute call, and we will answer them against your own district or academy requirements.
Solo student, not an academy? Check out FORGE SAT, built on the same engine that powers VindicaOS.