We collect a minimal amount of PII (Personally Identifiable Information) and collect only that which is necessary to provide our educational service.
We run background checks on employees and contractors with access to PII .
We use encryption to protect data. Data at rest is encrypted using the AES 256 standard and it is also password protected. Passwords in the database are encrypted using the pbkdf2 algorithm. data in motion is protected using the HTTPS protocol using SSL encryption.
We use AWS (Amazon Web Services) Servers in the US to store all PII. AWS features enterprise-scale security
We provide yearly privacy training for employees and contractors with access to PII.
We automatically delete data according to our terms and policies (or upon request to firstname.lastname@example.org).
For more detailed information please see our HECVAT form (Higher Education Community Vendor Assessment Toolkit).