# Trust & Safety

SchoolAI works with students. That shapes every product decision we make: what we build, what we won't build, and how we hold ourselves accountable.

Explore our principles, compliance certifications, privacy documentation, and impact evidence. We publish them because effective AI in education is built on public trust.

## Compliance

### Continuous monitoring

Monitoring

Note: If a control is passing all tests, it will be marked as green. If a control has a failed test that was not resolved within the past 7 days, it will be marked yellow.

- App Security
  - Code Review Process
  - Responsible Disclosure (Bug Bounty)
  - Software Development Lifecycle
  - Web Application Firewall
- Data Security
  - Daily Database Backups
  - Encryption at Rest
  - SSL/TLS Enforced
  - System Access Control Policy
- Infrastructure Security
  - Cloud Data Storage Restricted
  - Encryption of Web-Based Admin Access
  - Multiple Availability Zones
  - Password Policy
- Network Security
  - Denial of Public SSH
  - Firewalls
  - Logging/Monitoring
- Organization Security
  - Disaster Recovery Plan
  - Incident Response Plan
  - Incident Response Team
- Product Security
  - Databases Monitored & Alarmed
  - Messaging Queues Monitored & Alarmed
  - NoSQL Database Monitored & Alarmed
  - Servers Monitored & Alarmed

## Quick Links

- [Request SOC 2 report](https://trust.schoolai.com/)
- [View subprocessor list](https://trust.schoolai.com/)

## Resources

- [1EdTech Certification Documentation](https://site.imsglobal.org/certifications/schoolai-inc/schoolai)
- [Acceptable Use Policy](/content/msa/index.html)
- [Data Protection Policy](https://trust.schoolai.com/)
- [ESSA Tier 3 Validation — Student Critical Thinking](https://drive.google.com/file/d/16xwEKJuMsn9md8Q4woYC20rfV-xiYgVJ/view?usp=sharing)
- [ESSA Tier 3 Study — Student Critical Thinking](/content/research/schoolai-makes-students-think/index.html)
- [Incident Response Policy Summary](https://trust.schoolai.com/)
- [Penetration Test Executive Summary](https://trust.schoolai.com/)
- [Privacy Policy](/content/privacy/index.html)
- [SOC 2 Type 2 Report](https://trust.schoolai.com/)
- [Terms of Use](/content/terms/index.html)