Written and reviewed by Mahmoud Ghonemi, founder and CEO of iTutor ·
iTutor is designed to support FERPA (Family Educational Rights and Privacy Act) requirements for institutional deployments. Schools and universities can sign a Data Processing Agreement; student data is separated by institution, encrypted, and never used to train AI models. Admins control who can see what.
More detail
The institutional product separates each school's data, uses role-based access (student, teacher, admin), and encrypts data in transit and at rest. A Data Processing Agreement with each institution sets out data ownership (the school owns it), retention, and breach-notification procedures. Student data is never used to train AI models. This describes our practice rather than a certification, so a school with specific procurement requirements should confirm the details with us directly.