# Security and Compliance

## Committed to best-in-class security and compliance for everyone

Trusted by 22+ million educators and families, ParentSquare helps districts maintain compliance, safeguard sensitive information, and operate with confidence.

## Data privacy

**Privacy designed for schools and families**

ParentSquare includes built-in privacy safeguards to protect personal information across every interaction.

- **School and district oversight.** Administrators get access to all message transcripts.
- **Privacy controls.** Default privacy settings are enabled for schools and districts.
- **Access management.** Customers have role-based access controls and automated role syncing.
- **No ads.** Information is never shared with advertisers or marketers.
- **Minimal data collection.** ParentSquare only collects the information necessary to run our services.
- **Responsible AI.** AI features are built to protect privacy and support appropriate communication, including AI-powered content moderation (coming soon)

## Data security

**Built on proven security standards**

Protect student, staff, and family data with a platform built to meet rigorous security and compliance standards—backed by certifications, third-party testing, and industry frameworks.

- **SOC 2 Type 2 certification** for security, availability, and confidentiality
- **ISO 27001 certification** for information security management
- **NIST Cybersecurity Framework v2.0 alignment** to secure critical infrastructure and operations
- **AWS hosting** with US-based data storage and processing, which meets compliance programs including SOC 2, ISO 27001, PCI DSS Level 1, and NIST 800-53
- **Data encryption** in transit and at rest using AES-256 and transmitted via HTTPS
- **Third-party penetration** testing to identify and resolve vulnerabilities

## K-12 data privacy and compliance

ParentSquare follows strict data governance policies to protect user privacy and comply with education data privacy laws.

- **iKeepSafe certification** for compliance with FERPA, COPPA, California Student Privacy (including SOPIPA, PPRA, Ed Code 49073.6, and Ed Code 49073.1)
- **Access controls** to limit sensitive data to authorized ParentSquare personnel, with mandatory annual privacy training
- **Third-party vendor commitments** that meet or exceed our privacy policies, including restrictions on the sale or marketing use of personally identifiable information (PII)

[**Transparency you can count on** 
Discover how ParentSquare supports security and compliance for schools and districts. 
Explore the Trust Center](https://trust.parentsquare.com/)