Controls before claims
Certification claims appear here only when evidence is on file with legal/product review.
Measured, then published
- rolling 12-month uptimeMeasured on authenticated request success
- 99.98%
- contractual SLAWith service credits, on every tier
- 99.9%
- recovery point objectiveContinuous replication across availability zones
- < 15 min
- recovery time objectiveTested twice per year with published results
- < 4 hrs
How we protect records
Regulatory & privacy
The controls that carry your FERPA and GDPR obligations, built as configuration rather than institutional process.
Tenancy & data isolation
Multi-tenant infrastructure with isolation enforced below the application, plus evidence that it works.
Identity & access
Access control designed for an institution where roles change every term.
Accessibility
Both the staff platform and the student portal are audited, not self-certified.
Who processes data with us
Amazon Web Services
Primary application hosting and database infrastructure · US / EU / CA / UK
Cloudflare
Edge network, DDoS protection and WAF · Global
Stripe
Payment processing for tuition, plans and giving · US / EU
Twilio
SMS notifications for waitlists, deadlines and outreach · US / EU
SendGrid
Transactional and campaign email delivery · US / EU
Zoom
Virtual and hybrid event delivery for advancement · US / EU
Datadog
Application monitoring and log aggregation (no student PII) · US / EU