The Certification Process

After both parties sign the NDA, vendors provide our privacy assessors with access to the product and send documentation such as our data questionnaire, privacy policies, sample contract, and test logins. These materials are used to complete the manual assessment.

We then use a series of proxy and web traffic analysis tools to complete the technical assessment, depending on the environment, to reveal the third parties receiving data from the product.

Based on the findings of the manual and technical assessment, our privacy assessors will work with you to resolve any emergent privacy or security gaps to bring your product into compliance.

The initial assessment process can usually be completed within a month.

Once any relevant revisions to the policies or product are completed, vendors are awarded their chosen Privacy Badges to signify their compliance with relevant laws and regulations.

iKeepSafe will work reflexively with your team to create and distribute a Product Profile that summarizes and communicates how your product protects student data privacy & security, as well as a Press Release to communicate your compliance.

The communication plan can usually be completed in 1-3 weeks, depending on the vendor’s availability.

iKeepSafe is dedicated to helping vendors achieve and remain in compliance in the constantly evolving edtech regulatory landscape.

After the initial assessment we provide year-round support. We are available for ongoing consultation should there be any new or changed features to your product as necessary to remain in compliance.

Through our monthly newsletter and email communications we share new state and federal privacy & security legislation and news to keep your organization informed. 

As part of your subscription, vendors receive the required annual compliance training.

Training is delivered by nationally recognized data privacy experts with over 20 years’ experience in online technology, child safety, and privacy. All are CIPP certified with unique experiences in large, global consumer practices. They work with vendors to bring them into compliance with iKeepSafe’s guidelines, covering:

• Overview of the Federal and State-specific Privacy Laws
• Understanding and Identifying Non-personal vs. Personal Information vs. Directory information
• Acceptable Data Usage, Sharing, Protection and Deletion
• Information Security & Data Breach Best Practices