Security and privacy
Privacy-first, by design and by default
Children's data deserves more than a checkbox. CampusTip encrypts sensitive fields, masks what people don't need to see, logs every access, and never runs advertising, sells data or embeds third-party trackers.
The controls in place
What CampusTip does
Encryption
Identity
Access control
Tenant isolation
Audit
Children's data
Backups
Logs
Incident response
Hardening
United States
Compliance support for US schools and colleges
CampusTip is designed to support compliance with federal and state student-privacy law. The district stays in control of its records, and CampusTip acts as a school-official service provider under your agreement.
| Law or standard | How CampusTip supports it |
|---|---|
| FERPA | School-official access by legitimate educational interest; inspect-and-review within 45 days; amendment workflow with hearings; record of disclosures; directory opt-outs; rights transfer; return and deletion at contract end with a certificate. |
| COPPA | School-authorized accounts only (no self-signup); no commercial use, ads or trackers; written retention policy. |
| PPRA | Surveys and assessments touching protected areas can be gated by consent or opt-out. |
| State student-privacy laws | Built for SOPIPA-style statutes, California AB 1584 contracts, Illinois SOPPA and others: security program, breach notice, deletion and a public subprocessor list. |
| New York Education Law 2-d | Parents' Bill of Rights notice template, encryption, audit and the 7-day breach-notice clock. |
| Biometric laws | State rules applied automatically (Illinois BIPA, Texas, Washington); face recognition blocked for New York schools. |
| USDA school meals | Free and reduced-price eligibility on a need-to-know basis; no overt identification. |
| IDEA and Section 504 | Support records encrypted with an access roster. |
| Accessibility (ADA Title II, Section 508) | WCAG 2.1 AA work and automated accessibility tests; a VPAT / ACR in draft, with a third-party audit planned. |
| SDPC National Data Privacy Agreement | Controls map to the NDPA exhibits; we can sign the NDPA with your state's Exhibit G. |
India
Compliance support for Indian institutions
The institution remains the Data Fiduciary and CampusTip acts as its Data Processor under a Data Processing Agreement.
| Law or standard | How CampusTip supports it |
|---|---|
| DPDP Act 2023 and Rules 2025: notice | Itemised privacy notices per purpose, in English and Hindi templates; parents accept on behalf of children. |
| Verifiable parental consent | A consent ledger per purpose, with the verification method, one-tap withdrawal, and processing that stops when consent is withdrawn. |
| Rights of the data principal | Access, correction, erasure, grievance and nomination requests, with deadlines (30 days by default). |
| Grievance officer and DPO | Contacts published on the sign-in page, in the app and in every response. |
| Breach timelines | Board intimation without delay, a detailed report within 72 hours, and notices to affected people, tracked with templates. |
| CERT-In Directions | 6-hour incident reporting clock and form, a named point of contact, logs kept at least 180 days in India, and clocks synchronised to NIC/NPL time servers. |
| IT Act SPDI Rules | Encryption of biometric, health and financial data; written consent for biometrics; a published grievance officer. |
| Data residency | A dedicated India-region deployment; requests for institutions of another region are refused. |
| UDISE+ | Student-level export, with each export logged. |
| School-bus rules | GPS tracking, attendant, over-speed alerts, driver verification records, SOS and CCTV link. |
| RPwD Act and GIGW | Accessibility work towards WCAG 2.1 AA; an Accessibility Conformance Report in draft and a third-party audit planned. |
Independent assurance
Honest about where we are
CampusTip holds no certifications (for example, no SOC 2 report yet). Our engineering team carried out an internal security self-assessment with open-source tools on 2026-10-01 and re-assessed after remediation on 2026-10-02. Every High finding was fixed and verified, and the overall risk rating moved from High to Moderate; the remaining items are hosting and organisational steps completed for each production deployment.
This is not a third-party audit, SOC 2 report or certification. A third-party penetration test can be arranged before go-live if your institution or insurer requires one.
Your data, your rights
- Every user can download their data, request a correction or request deletion
- Parents act for children under 18; eligible students act for themselves
- Sensitive values are revealed for 30 seconds, with a logged reason
- A complete export at contract end, then certified deletion with a certificate of destruction
- Hosted in a US or India-region data centre, or on your own server
Questions from your privacy or IT team? Contact us for our security documentation and data agreement.
See CampusTip with your own roles
A guided demo on a sample district or institution, tailored to the modules you care about. A live demo environment is available on request.