FERPA Compliance
How Schooligio.ai protects student education records and supports families’ rights under the U.S. Family Educational Rights and Privacy Act (FERPA).
Last updated: [11-Aug-2025]
-What is FERPA?
The Family Educational Rights and Privacy Act (FERPA) is a U.S. federal law that protects the privacy of student education records. FERPA gives parents—and eligible students aged 18 or attending postsecondary institutions—specific rights regarding access to, and disclosure of, education records held by schools and their service providers.
Scope & Roles
- Controller (School/District): Determines what student data is processed and for what educational purpose.
- Processor (Schooligio.ai): Processes education records solely on the school’s documented instructions, for counseling and college/career readiness services.
- Parents/Eligible Students: Hold rights to access and request amendment to education records, and to control most disclosures.
Your Rights Under FERPA
Inspect & Review
Parents and eligible students can request access to education records maintained by the school and Schooligio.ai on the school’s behalf.
Request Amendment
If you believe records are inaccurate or misleading, you may request correction through your school. We will assist the school with updates.
Control Disclosures
Most disclosures of personally identifiable information (PII) from education records require written consent, unless an exception applies.
File a Complaint
You may file a complaint with the U.S. Department of Education if you believe your rights under FERPA have been violated.
How Schooligio.ai Uses & Protects Education Records
- Purpose-limited processing: We process student data only to deliver counseling and college/career readiness features requested by the school.
- No selling or targeted ads: We never sell education records or use them for behavioral advertising.
- Security controls: Encryption in transit (TLS 1.2+) and at rest (AES‑256), role‑based access, MFA for admins, and regular reviews.
- Data minimization: We collect only what’s necessary; we de‑identify or aggregate data where possible.
- Retention & deletion: Records are retained only as long as needed for the educational purpose or as required by law, then securely deleted per our retention schedule.
Disclosures, Consent, and Directory Information
When consent is required
Disclosure of PII from education records generally requires written consent from a parent or eligible student. The school manages consent; Schooligio.ai acts on the school’s documented instructions.
Common FERPA exceptions
- School officials with legitimate educational interests
- Compliance with a judicial order or lawfully issued subpoena
- Health or safety emergencies
- Accrediting organizations and certain state/local educational authorities
Directory information
Schools may designate certain information (e.g., name, grade level) as “directory information.” We only handle directory information according to the school’s policy and instructions, including any opt‑out choices.
Recommendations & waiver
If your school uses recommendations, students may choose to waive the right to review recommendation letters. This choice is voluntary and recorded by the school; we honor the school’s record of your selection.
Requesting Access, Copies, or Corrections
To make a FERPA request, contact your school first. Schooligio.ai supports the school by processing requests promptly.
FERPA requests are typically fulfilled within a reasonable time, not to exceed 45 days.
Service Providers (Subprocessors)
We use carefully vetted service providers bound by Data Processing Agreements (DPAs). See our current list and last review dates on our Trust Center.
Complaints
If you believe your FERPA rights have been violated, you may file a complaint with your school and with the U.S. Department of Education’s Student Privacy Policy Office (SPPO).
Student Privacy Policy Office (SPPO)
U.S. Department of Education
400 Maryland Ave, SW, Washington, DC 20202
Website: https://studentprivacy.ed.gov
