FERPA

Overview

FERPA is a U.S. federal privacy law that protects the privacy of student education records and applies to educational agencies and institutions that receive applicable U.S. Department of Education funding. For Xano as a SaaS platform, FERPA alignment means maintaining privacy, security, contractual, and operational controls designed to support customers that build and operate applications involving education-related data through the Xano platform. For customers such as schools, districts, colleges, universities, and education technology providers, this can help support their own FERPA-related obligations; however, customers remain responsible for determining whether FERPA applies to their use case, configuring their applications appropriately, managing access to education records, providing required notices where applicable, and responding to eligible student or parent rights requests.

How Xano Aligns With Criteria

Xano maintains a range of policies, procedures, and operational controls to support its alignment and overall security posture. The examples below highlight key elements of our program in relation to this framework, and do not represent a complete list:

• Data Processing Addendum (DPA) - available to all paid plans (excluding Free plan), please request a DPA by emailing us at security@xano.com
• Subprocessor list - available here (https://docs.xano.com/legal/xano-subprocessors)
• Privacy Notice - available here (https://docs.xano.com/legal/privacy-notice)
• Information Security Policy
• Privacy & Data Protection Policy
• Access Control Policy
• Incident Response Procedure
• Disaster Recovery Procedure
• Data Subject Access, Correction, & Erasure Request Procedure
• Audit Logging Procedure