Five pillars of data security
Every design decision in EvalTrack starts with a simple question: would a school psychologist trust this with student data?
Encryption in transit and at rest
All data transmitted between your browser and EvalTrack is encrypted using TLS 1.3. Student records stored in our database are encrypted at rest. Your data is never readable in plaintext by anyone — including us.
- TLS 1.3 for all connections
- AES-256 encryption at rest
- Secure, HTTPS-only access
Role-based access controls
Only authorized users can see student data. Practitioners access only their own caseloads. School administrators see only their school's records. Access is enforced at the database level using Row Level Security — not just in the UI.
- Practitioners see only their own cases
- School admins see only their school
- Database-level RLS enforcement
- Audit logging for all data changes
Automated backups
Your data is automatically backed up daily. Backups are retained for 30 days and stored in geographically redundant infrastructure. In the unlikely event of data loss, we can restore to any point within the retention window.
- Daily automated backups
- 30-day retention window
- Geographically redundant storage
Data export and portability
Your data belongs to you — always. Export your full caseload and evaluation records at any time in standard formats. No lock-in, no hostage data. If you ever leave EvalTrack, you take everything with you.
- Export caseloads as CSV or JSON
- Full data export on request
- No proprietary lock-in formats
Account deletion and data removal
You can request full account and data deletion at any time by emailing us. All associated student records, evaluations, and caseload data are permanently removed within 30 days of your request — in compliance with FERPA requirements.
- Full deletion on request
- Completed within 30 days
- Confirmation provided in writing
Built for the Family Educational Rights and Privacy Act
FERPA requires that educational agencies protect the privacy of student education records. EvalTrack is designed to help school psychologists and Child Study Teams meet these obligations — with access controls, audit trails, and data handling practices aligned to FERPA's requirements for electronic student records.
Questions about security?
We're happy to answer any questions about how EvalTrack handles your data — including providing a data processing agreement for your district.
Contact support@meridianstudentsystems.com