Security & privacy
How we protect your students' data.
What we do, in plain language. Your IT lead is welcome at the demo.
What we do, in plain language. Your IT lead is welcome at the demo.
Row-level security in the database keeps every school's data separate. We audit these policies regularly and fix what we find.
Every student and staff account starts from an invitation your school issues. Invite codes expire.
Students, learning center staff, administrators, and IT each get only the access their work needs. Changing a role takes an explicit, controlled step.
Administrative actions are logged, and your school can review the log.
NexusPlan's internal console shows counts per school. Small groups are hidden so individual students can't be identified.
Troubleshooting uses a "view as" tool that is logged and limited by role.
SIS API credentials are stored encrypted, scoped to your school, and used only to run your school's sync.
We run internal security reviews against our own system and fix what they find.
We sync what planning needs: assignments, due dates, rosters, and grades.
Student data is never sold or used for advertising. Schools pay for the product.
When a school leaves, it can export its data and then have it deleted.
Students see grades per assignment, with no overall average. There are no streaks or public leaderboards.
Your school controls its education records. Access is scoped by role, our staff access is limited and logged, and records can be exported or deleted when you ask.
Have a vendor security questionnaire? Send it through the contact page and we'll answer it directly.
We'll walk through data separation, the audit log, and offboarding live.