Security & Privacy
Security & Privacy
EduSphere products are designed to support schools in handling education records consistent with FERPA-related responsibilities. Schools remain responsible for their own compliance decisions.
Encrypted connections
All four applications are served over encrypted HTTPS connections.
Separate data
Each application keeps its own data and permissions. PaperGrade and SkillProof use TrackStudents school membership for institutional access; SafeStudy Web is fully independent. There is no shared student database or automatic sync.
Least access
Staff and students see only what their role, class or assignment allows.
Data minimization
Products are designed to collect only what the classroom workflow needs.
Security topics
Data protection
Encrypted HTTPS connections for every product; data stored with each product's cloud provider.
User authentication
Staff and teachers sign in to each product. TrackStudents students never sign in; PaperGrade students use a classroom code.
Role-based access
Administrators, teachers and support staff see only what their role, class or assignment allows.
School data separation
Each school's records are kept separate; demo and test data are kept apart from real data.
Student information privacy
Collect only what the classroom needs. Student data is not sold and not used to train AI models.
Data retention
Retention and deletion are handled per product and reviewed with each school during onboarding.
Integration considerations
No automatic student-data sync between applications or with a student information system. SafeStudy Web shares no accounts or rosters with the others.
IT onboarding
Allow each product domain, plan classroom devices and decide who holds each role. Detailed documentation available on request.
How to read this page: product features, implemented security controls, your school’s own policies and formal compliance documentation are different things. EduSphere does not claim FERPA or SOC 2 certification or third-party audits; vendor certifications belong to the vendor, and compliance documentation is available on request. Each application’s own privacy policy and terms remain in effect.
Product by product
TrackStudents
User roles
- • Administrator
- • Teacher
- • IA, Learning Support, PCA (assigned students only)
- • Student Kiosk (limited screen)
Sign-in overview
Staff sign in before seeing any student information. Students do not sign in to the staff application.
Access boundaries
Each school has its own workspace. Within it, access is limited by classroom and by student assignment.
Privacy & data handling
- • Student data is not sold or used to train AI models
- • IEP/504 kept as a daily-use Plan Summary, not the full IEP
- • Corrections keep their history
Deployment
- • Allow trackstudents.org
- • Plan a kiosk device per classroom if used
- • Decide who holds each role
IT questions
Can a PCA see the whole class?
No. A PCA in a class of 20 assigned 2 students sees those 2.
Is demo data mixed with real data?
No. Demo and test data are kept separate from production.
TrackStudents · Technical Architecture
TrackStudents: Systems Architecture
Access roles, workspace separation, encryption, data minimization and integrations for school IT.
20 slides · about 15 min (approximate) · For: IT Director, Superintendent, Purchasing Department
PaperGrade
User roles
- • Teacher (signs in)
- • Student (no account; code, link or QR)
Sign-in overview
Teachers sign in to create, publish and grade. Students join a specific assignment without an account.
Access boundaries
Assignments and results belong to the teacher's classroom. Students only see their own score.
Privacy & data handling
- • No student emails or passwords to store
- • Answer keys never shown to students
- • Reports via private, short-lived links
Deployment
- • Allow papergrade.app
- • Allow camera use if students scan QR codes
- • No software to install
IT questions
Does PaperGrade sync with our SIS?
No automatic SIS sync is claimed.
Does anything publish without the teacher?
No. Teachers review and publish every assessment.
PaperGrade · Technical Architecture
PaperGrade: Systems Architecture
Access, teacher sign-in, document import, grading, answer-key protection and privacy for IT.
24 slides · about 15 min (approximate) · For: IT Director, Superintendent, Purchasing Department
SkillProof
User roles
- • Instructor
- • Student (signs in to own record)
- • Workplace supervisor (invited only)
Sign-in overview
Instructors and students sign in. Supervisors join only by school invitation.
Access boundaries
Invite-only classrooms with teacher approval. Supervisors see only their own students.
Privacy & data handling
- • No public profiles or directories
- • Portfolios shared only after teacher approval and consent
- • Verification history kept
Deployment
- • Allow skillproofedu.com
- • Decide how students sign in
- • Plan supervisor invitations for co-op
IT questions
Does SkillProof issue certifications?
No. Instructors verify skills; outside bodies issue certifications, which SkillProof can document.
Can verifications change?
Where supported, a verification can be revoked and the change is kept.
SkillProof · Technical Architecture
SkillProof: Systems Architecture
Classroom boundaries, verification history, portfolios, supervisors and privacy for IT.
22 slides · about 15 min (approximate) · For: IT Director, Superintendent, Purchasing Department
SafeStudy Web
User roles
- • School administrator
- • Teacher
- • Student (school-created account)
- • Designated staff for flagged AI questions
Sign-in overview
Accounts are created by the school with one-time temporary passwords; there is no public sign-up. Staff sign in with an authenticator app.
Access boundaries
Every record belongs to one school, and database rules keep schools apart. Permissions are checked on the server for every request.
Privacy & data handling
- • Students are told what their school can see
- • Educational AI search is off by default
- • Sensitive actions are written to an audit log
Deployment
- • Allow safestudyweb.com
- • Optional Chromebook extension enrolled with single-use codes
- • Set school browsing defaults and limits
IT questions
Is SafeStudy Web connected to TrackStudents?
No. It has its own school identities, staff and student accounts, rosters and permissions.
Can a teacher override the blocked list?
No. A platform-wide prohibited list can't be overridden, and unreviewed sites stay off the home screen.
EduSphere
User roles
- • Each product has its own roles
- • No account on this website
Sign-in overview
There is no EduSphere-wide sign-in. TrackStudents school membership can grant eligible access to PaperGrade and SkillProof; SafeStudy Web is separate.
Access boundaries
Four applications with separate data, reviewed one by one.
Privacy & data handling
- • This website holds no student records
- • Each product keeps its own data
- • No unverified certifications are claimed
Deployment
- • Allow each product domain you adopt
- • Set up rosters in each product
- • Review each product separately
IT questions
One login for all four?
No. Connected institutional access covers PaperGrade and SkillProof through TrackStudents only.
A combined report?
No. Each application reports on its own data.
EduSphere Suite · Technical Architecture
EduSphere: IT & Security Overview
Three independently operated systems: access, roles, data separation and IT review.
21 slides · about 15 min (approximate) · For: IT Director, Superintendent, Purchasing Department
Schools requiring additional technical, privacy, or security documentation may request a more detailed review during the administrator onboarding process.