Data Governance & Privacy.
Last Updated: October 2023. Our commitment to securing the future of educational data.
Data Ownership & Governance
At Appitor, we believe in absolute institutional sovereignty. Your school, college, or university retains 100% legal ownership of all student, staff, and academic data uploaded to the platform. Appitor acts strictly as a Data Processor, never a Data Owner.
Encryption Standards
All data residing within the Appitor Kernel is encrypted at rest using AES-256 standards. Data in transit is protected via TLS 1.3 (Transport Layer Security), ensuring that your institutional communications remain intercepted-proof and fully encrypted between nodes.
School Privacy Compliance
Our architecture is engineered to align with global data protection standards, including FERPA (Family Educational Rights and Privacy Act) and GDPR principles. We implement granular RBAC (Role-Based Access Control) to ensure that only authorized personnel can access sensitive records.
Strict No-Sale Policy
Appitor has a zero-tolerance policy regarding data monetization. We do not, and will never, sell, rent, or trade your institutional data to third-party advertisers or data brokers. Your privacy is not a product; it is a fundamental right of your institution.
Audit Transparency
Administrators have access to real-time telemetry and audit logs. Every interaction with the database is logged, providing a transparent trail of who accessed what data and when, ensuring internal accountability and security.
Hosting & Infrastructure
Data is hosted on secure, mission-critical infrastructure with multiple redundancy layers. We utilize enterprise-grade cloud providers that maintain ISO 27001 and SOC 2 Type II certifications for physical and network security.
Cookie Policy
Appitor uses essential cookies to maintain session states and security. These are mandatory for the operation of the platform. We may also use analytical cookies to improve platform performance, which do not track individual identity. You can manage your preferences through your browser settings, though disabling essential cookies may impact platform functionality.
Third-Party Integrations
Our platform may integrate with third-party services like Google Workspace or Microsoft 365. When you enable these integrations, data is exchanged according to the privacy policies of those providers. Appitor ensures that all API integrations are secured via OAuth 2.0 and follow strict privacy protocols.
Legal Disclosures
We may disclose your information only if required by law or in response to valid requests by public authorities (e.g., a court or a government agency). In such cases, we will attempt to notify the affected institution unless prohibited by legal mandate.