Security & Privacy FAQ

Yes. Attendance Genius has earned the 1EdTech TrustEd Apps™ Data Privacy Certification. This certification is awarded after a rigorous, independent audit of our privacy policies and technical security practices. It confirms that we meet the highest standards for transparency, data ownership, and security in the K-12 sector.

Your school or district does. Attendance Genius claims no ownership over Student Data or Education Records. We act as a service provider (a "School Official" under FERPA) and only process data to provide the services requested by the institution. You retain the right to access, export, or delete your data at any time.

We use a "defense-in-depth" approach to security:

Encryption in Transit: All data sent between your device and our servers is encrypted using industry-standard TLS 1.2 or higher.

Encryption at Rest: All data stored in our databases and file systems is encrypted at the disk level (AES-256).

Application-Level Encryption: As an additional safeguard, sensitive student information is encrypted within our application code before it even reaches the database, ensuring that the data is unreadable to anyone without proper authorization.

No. We have a strict Zero-Ad Policy. We do not sell, rent, or trade student data to third parties. We do not use student data to build behavioral profiles, and we do not allow third-party advertising networks to track students on our platform.

Yes. Our Privacy Policy and Terms of Service are specifically designed to comply with the Family Educational Rights and Privacy Act (FERPA) and the Children's Online Privacy Protection Act (COPPA). We ensure that data collection is limited only to what is necessary for educational purposes.

We respect the "Right to be Forgotten." If a school terminates its service, we initiate a hard-deletion process that permanently purges all associated Student Data and account records from our active systems and backups within 90 days.

We provide and recommend Two-Factor Authentication (2FA) for all staff accounts. Additionally, we enforce strong password policies to prevent unauthorized access. Our internal access to production systems is restricted to a limited number of authorized security personnel and requires multi-layer authentication.

All Attendance Genius data is stored in secure, SOC 2 compliant data centers located within the United States. We utilize highly resilient infrastructure providers (DigitalOcean and Cloudflare) that are contractually bound to maintain the same high level of privacy and security protection that we promise to our customers.

While we maintain rigorous preventative measures, we have a formal Incident Response Plan in place. In the event of a confirmed breach involving Personally Identifiable Information (PII), we commit to notifying affected institutions within 24 hours to ensure complete transparency and rapid remediation.