FERPA Compliance
PalsPlan is built from the ground up to protect student educational records under FERPA.
What is FERPA?
The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. FERPA gives parents and eligible students rights over their educational records, including the right to inspect records and request corrections. Schools must have written permission before releasing personally identifiable information from a student's education record.
Our Safeguards
Role-Based Access Control
Every action is permission-gated. Students, presidents, and advisors each have strictly defined capabilities. No unauthorized access to student records.
Encryption at Rest & In Transit
All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Student records are never exposed in plain text.
Audit Logging
Every data access and modification is logged with timestamps, user identity, and action type for complete accountability.
Data Minimization & Deletion
We collect only what's necessary for club management. Schools can request full data deletion at any time, and we comply within 30 days.
Parental Access Rights
Parents have the right to inspect their child's educational records. Our optional parent portal provides secure, read-only access to club activity.
School Agreements
We enter into data processing agreements with each school, clearly defining data handling responsibilities and breach notification procedures.
Questions?
If you have questions about our FERPA compliance practices or need documentation for your school's review, contact us at compliance@palsplan.app or visit our Support page.