SchoolTRACC implements administrative, technical, and physical safeguards to protect student data and personally identifiable information (PII).

• Encryption of data in transit and at rest
• Role-based access controls
• Secure authentication methods

SchoolTRACC's information security program is being mapped to applicable NIST SP 800-53 Revision 5 controls and assessed using procedures informed by NIST SP 800-53A Revision 5.

• Secure cloud hosting with industry-standard protections
• Contractual safeguards with service providers

All subcontractors and service providers are bound by written agreements requiring compliance with this Privacy Policy, the Terms of Service, and applicable data privacy laws, including FERPA and applicable state student data privacy requirements.

• Continuous monitoring for suspicious activity
• Incident response procedures aligned with legal obligations
• Notification to affected institutions within 72 hours of confirmed data breach

Data Security related questions may be directed to: data@counseltracc.com