School Data Security and Compliance | SOC 2, ISO 27001 | ParentSquare
Security and Compliance
Committed to best-in-class security and compliance for everyone
Trusted by 22+ million educators and families, ParentSquare helps districts maintain compliance, safeguard sensitive information, and operate with confidence.
Data privacy
Privacy designed for schools and families
ParentSquare includes built-in privacy safeguards to protect personal information across every interaction.
- School and district oversight. Administrators get access to all message transcripts.
- Privacy controls. Default privacy settings are enabled for schools and districts.
- Access management. Customers have role-based access controls and automated role syncing.
- No ads. Information is never shared with advertisers or marketers.
- Minimal data collection. ParentSquare only collects the information necessary to run our services.
- Responsible AI. AI features are built to protect privacy and support appropriate communication, including AI-powered content moderation (coming soon)
Data security
Built on proven security standards
Protect student, staff, and family data with a platform built to meet rigorous security and compliance standards—backed by certifications, third-party testing, and industry frameworks.
- SOC 2 Type 2 certification for security, availability, and confidentiality
- ISO 27001 certification for information security management
- NIST Cybersecurity Framework v2.0 alignment to secure critical infrastructure and operations
- AWS hosting with US-based data storage and processing, which meets compliance programs including SOC 2, ISO 27001, PCI DSS Level 1, and NIST 800-53
- Data encryption in transit and at rest using AES-256 and transmitted via HTTPS
- Third-party penetration testing to identify and resolve vulnerabilities
K-12 data privacy and compliance
ParentSquare follows strict data governance policies to protect user privacy and comply with education data privacy laws.
- iKeepSafe certification for compliance with FERPA, COPPA, California Student Privacy (including SOPIPA, PPRA, Ed Code 49073.6, and Ed Code 49073.1)
- Access controls to limit sensitive data to authorized ParentSquare personnel, with mandatory annual privacy training
- Third-party vendor commitments that meet or exceed our privacy policies, including restrictions on the sale or marketing use of personally identifiable information (PII)