Protect learner data and keep institutional risk under control
Connect privacy obligations, third-party risk, policy attestations and audit evidence for schools, universities and education platforms.
What education teams tell us
Student information spans many systems
Link records-access policies, data handling controls and ownership across learning platforms, admissions systems and campus services.
Education technology vendors multiply exposure
Tier vendors that process learner or employee information, record due diligence and track contractual safeguards and review dates.
Privacy requirements vary by audience
Map applicable student and child privacy requirements to controls, responsible teams and the evidence reviewers expect.
Continuity matters during the academic year
Document service dependencies, recovery plans, incidents and action owners to reduce disruption to teaching and learning.
What you get in the first quarter
- Clear accountability for student and employee data controls
- Reusable evidence for privacy and security reviews
- Coordinated edtech vendor oversight
- Policy attestations and continuity reviews in one workspace
Frameworks included
- FERPA
- COPPA (where applicable)
- NIST CSF 2.0
- ISO 27001
- GDPR (where applicable)
The modules education teams start with
Every module shares the same control library, so you can add the next one without rebuilding anything.
Compliance automation
One control library mapped to every framework in scope.
Explore module →Third-party risk
Tiering, due diligence and continuous vendor monitoring.
Explore module →Enterprise risk
Quantified registers, appetite thresholds and treatment plans.
Explore module →Policy management
Author, approve, publish and attest with full version history.
Explore module →Audit & evidence
Scoped auditor access to live evidence and testing history.
Explore module →Business continuity
Impact analysis, recovery plans and scenario testing.
Explore module →See TrustsComply configured for education.
A 30-minute walkthrough using the frameworks and risk content your sector is measured against.