Skip to main content

Privacy Proof

Dashboard

Privacy Proof

FERPA · Title IX

FERPA student-record compliance + Title IX readiness assessment — access logging, technical, administrative, physical & Title IX safeguards.

— tokens
Classic Form mode active
Compliance Score0%

0 of 38 controls satisfied across 5 safeguard categories

AI Remediation Roadmap

38 unchecked controls → prioritized by risk vs effort

AI Policy Generator

Auto-draft a HIPAA-ready policy for any unchecked documentation control.

Technical Safeguards (FERPA)

Technology and processes that protect student education records from unauthorized access.

0%

Access Controls

Unique User Identification (no shared logins)
Multi-Factor Authentication (MFA) for student-record access
Automatic Logoff after inactivity

Data at Rest

Encryption at Rest for Student Records
Database Access Controls & Audit Logging
Encrypted Backups with Key Rotation

Data in Transit

TLS 1.2+ Encryption for Student Data Transfers
Secure API Endpoints (OAuth / mTLS)
VPN Required for Remote Record Access

Vendor Access

Signed DPA / Data Privacy Agreement
Vendor MFA Enforced
Record Access Minimized (Least Privilege)

Access Logging & Records (FERPA §99.32)

Track and retain disclosures of PII from education records.

0%

Access Monitoring

Automate real-time access logging for student records
Monitor user authentication (all successful & failed logins)
Track every view and disclosure of student education records
Monitor system events (password changes, privilege escalations)
Enforce log immutability (RBAC — no tampering, even by admins)
Retain disclosure records per FERPA §99.32
Automate real-time alerting for abnormal access patterns

Log Entry Elements — confirm your logs capture each

Date & Time (precise timestamp)
User ID (unique identifier)
Action Taken (clear event description)
Record / Resource accessed
Access Location (e.g., IP address)

AI Audit-Log Analysis

Upload a log sample and ask plain-English questions; the AI flags anomalies.

Upload a log sample to enable analysis.

Administrative Safeguards

Policies, roles, and workforce management for student-record privacy.

0%

Administrative Controls

Designated FERPA Coordinator
Annual FERPA Policy Review
Annual Data Privacy Training for all staff
Data Privacy Agreements (DPAs) in place for all vendors
Documented Incident / Breach Response Plan

Physical Safeguards

Protect physical facilities and devices that house student records.

0%

Physical Controls

Facility Access Controls (locked doors, keycards)
Workstation Security (screens away from public view)
Device & Media Disposal (documented wipe/destroy procedures)
Complete Asset Inventory of all record-access devices

Title IX Compliance

Notice, grievance procedures, training, and records for sex-based discrimination/harassment.

0%

Title IX Readiness

Designated Title IX Coordinator (appointed & trained)
Adopted Grievance Procedures Published
Notice of Rights, Coordinator & Procedures Published
Annual Title IX Training for Relevant Staff
Title IX Records Retained for 7 Years

Name the assessment to save.

Welcome to the Quality & PM Suite

Pick your primary role — we'll set up the right sector (Healthcare, Education, or both) as your starting workspace. You can switch anytime.