Assessdo is built with a security-first mindset to protect sensitive student data and maintain the highest standards of confidentiality, integrity, and system availability. We employ modern security practices and technologies to safeguard our platform and users from unauthorized access, data breaches, and potential threats.

Encryption

Data in Transit:
All data transferred between users and Assessdo’s servers is encrypted using industry-standard TLS (Transport Layer Security). This ensures that information remains protected during transmission.

Data at Rest:
Stored data is encrypted using AES-256 encryption, ensuring that sensitive information remains secure even when not actively being used.

Secure Authentication

Single Sign-On (SSO):
We support integration with secure SSO providers to streamline user access and minimize risk from password-based attacks.

Multi-Factor Authentication (MFA):
Assessdo offers MFA for added protection, requiring an additional verification step during login to safeguard against unauthorized access.

Role-Based Access Control (RBAC)

Access to sensitive data is tightly controlled through role-based permissions. Each user is assigned specific access rights based on their role (e.g., counselor, administrator, support staff), ensuring that only authorized individuals can view, edit, or manage specific data sets.

Vulnerability Testing & Code Audits

Regular Penetration Testing:
We partner with third-party security experts to conduct routine penetration testing that simulates real-world attacks, helping us identify and address vulnerabilities proactively.

Code Audits & Static Analysis:
Our development process includes secure coding practices, code reviews, and automated static analysis to detect potential issues before they reach production.

Infrastructure Security

• Hosted on secure, compliant cloud infrastructure (e.g., AWS, Azure, or GCP)
• Firewalls and intrusion detection systems to monitor and block suspicious activity
• Automatic scaling and redundancy to maintain system availability and uptime

Data Backup & Disaster Recovery

Assessdo performs regular, encrypted backups of all critical data. Our disaster recovery plan ensures minimal downtime and data integrity in the event of a system failure or breach.

Logging & Monitoring

Continuous logging and real-time monitoring are in place to track access, usage, and anomalies. This helps detect threats early and maintain a transparent audit trail for investigations and compliance.

Compliance Alignment

While this section focuses on protection, all security practices are aligned with compliance standards including FERPA, COPPA, and state-level privacy laws. See our Data Privacy & Compliance page for more details.