FERPA and VPAT compliant. HECVAT and DPA ready. Student data stays protected without exceptions.
Everything your IT security and procurement teams need to evaluate StarQuiz.
Higher Education Community Vendor Assessment Toolkit. Completed and ready for your security review.
Contract template ready to sign. FERPA and SOPIPA compliant.
WCAG 2.1 AA compliant. Full VPAT available on request.
AWS, North America region. Enterprise-grade infrastructure with 24/7 monitoring.
72-hour notification timeline. Full incident response plan available on request.
HECVAT, DPA, subprocessors list, VPAT, security whitepaper, and incident response plan available for institutional review.
Compliance backed by technical safeguards, not just policies.
AES-256 encryption at rest and TLS 1.3 in transit. Your data is encrypted from the moment it's created to when it's stored.
Data hosted on AWS infrastructure in North America with 24/7 monitoring, redundant backups, and disaster recovery.
Role-based access with multi-factor authentication. Only authorized users see student data, with complete audit logging.
The Family Educational Rights and Privacy Act protects student education records. StarQuiz is fully FERPA compliant, ensuring that student data is never shared without proper authorization.
•Institutions maintain full control over student data access and sharing permissions.
•Student information is never sold, shared, or used for advertising purposes.
We follow Web Content Accessibility Guidelines (WCAG) 2.1 Level AA to ensure StarQuiz is usable by everyone, regardless of ability.
•Voluntary Product Accessibility Template (VPAT) documents our accessibility conformance for procurement review.
•Regular accessibility audits using Lighthouse, Equal Web, and IBM Accessibility Checker ensure continued compliance.
For K-12 institutions serving students under 13, StarQuiz complies with COPPA (Children's Online Privacy Protection Act), ensuring child privacy protection with no behavioral advertising, minimal data collection, and school-verified consent mechanisms.
Transparency in practice. Here's exactly what we collect, why we collect it, and how we protect it.
Your content is sanitized before it touches any AI. Teachers control everything after.