FERPA Certified Privacy
Student educational records (IEPs, METs, evaluations) are strictly locked to authorized educational staff. We never sell, rent, or commercialize student data. Your district owns 100% of its records.
HIPAA Clinical Guardrails
Speech, Occupational Therapy, and Psychological health notes receive protected clinical segregation. Only specialists and case managers with an educational need-to-know have permission to view them.
Immutable Backups & Defense
If a computer in your school district is lost or compromised, your GoodTalk data remains safe, encrypted, and fully restorable from disaster-proof secondary cloud vaults within minutes.
FERPA: Student Scholastic Privacy
Family Educational Rights and Privacy Act (34 CFR Part 99)The Plain English Analogy: The "Need-to-Know Keycard"
Think of traditional paper files kept in a locked filing cabinet in the main office. In GoodTalk, that cabinet is digital: a 9th-grade English teacher only gets the keycard to see their enrolled students' accommodations, the school psychologist sees psychological evaluations, and the front desk secretary only sees enrollment records. No one has wandering eyes, and every click leaves a permanent time-stamped digital footprint.
A teacher only sees students currently in their classroom roster. Case managers only see their assigned caseload. District leadership retains bird's-eye oversight without exposing sensitive individual therapy logs.
Every time a student's IEP, evaluation draft, or service log is viewed, edited, exported, or signed, GoodTalk automatically records the exact user name, IP address, timestamp, and action taken for legal audit compliance.
We do not monetize student metrics, sell email rosters to third parties, or use student records to train public artificial intelligence models. Your school district retains 100% ownership and can request complete data export or deletion at any time.
Traditional School Handling vs. GoodTalk
| Scenario | Traditional Practice (Risk) | GoodTalk Shield (Compliant) |
|---|---|---|
| Emailing an IEP / Evaluation | High Risk PDF attachments can be forwarded, printed, or sent to wrong parents. | 100% Protected Links expire automatically, require verified district login, and cannot be forwarded. |
| Teacher Input for MET / Evaluation | Loose Forms Paper questionnaires left on teachers' desks or unencrypted Google Forms. | Encrypted Vault 2-minute digital survey stored directly in the student's encrypted evaluation dossier. |
| Staff Turnover / Laptop Loss | Data Leak Files left in browser downloads or local desktop hard drives. | Cloud Only Zero student records live on local hard drives; access is revoked in 1 second. |
HIPAA: Clinical Health & Therapy Protection
Health Insurance Portability and Accountability Act StandardsThe Plain English Analogy: The "Doctor's Private Envelope"
In a school setting, speech therapy, occupational therapy, and psychological diagnostics touch on medical health. GoodTalk treats these records like a sealed envelope: while the general education teacher knows the student has speech sessions on Tuesdays, only the licensed therapist and designated case manager can open the clinical notes inside.
Service minute logs and therapeutic data collected by Speech-Language Pathologists (SLPs) and Occupational Therapists (OTs) are separated from general gradebooks and standard student directories.
When a teacher requests behavioral support or a crisis consult, notes concerning emotional dysregulation or antecedents route directly into the school psychologist's private triage queue.
GoodTalk enters into legally binding Business Associate Agreements with our enterprise districts, formalizing our shared responsibility to safeguard student health metrics under federal statutes.
Where is Your Data Stored & How is it Locked?
Enterprise Infrastructure & Encryption ArchitectureThe Plain English Analogy: An Armored Truck + Bank Safe
When data is moving across the internet (like when a teacher clicks 'Save'), it travels in an **Armored Truck** (TLS 1.3 encryption). Once it arrives in our data center, it is locked into an **Individual Safety Deposit Box** (AES-256 encryption at rest). Even if someone somehow intercepted the files, they would see only scrambled, meaningless digital gibberish without the master district key.
All GoodTalk databases and servers reside physically inside certified Tier-4 data centers within the United States. No student information ever crosses international borders or is stored offshore.
District A's database cannot talk to District B's database. Each district's data lives in an isolated digital partition, preventing cross-district contamination or accidental data visibility.
In Transit: Protected by TLS 1.3 cryptographic protocols.
At Rest: Hardened with AES-256 bit encryption, the identical security standard utilized by premier financial institutions.
What Happens in the Event of a Security Incident?
Incident Response, Disaster Recovery & Ransomware ImmunityThe Plain English Analogy: The "Submarine Bulkhead Doors"
Modern cyber defense isn't just about building tall walls; it's about what happens if someone tries to break in. Like a submarine with automated watertight doors, if suspicious activity is detected on one account, GoodTalk automatically seals off that specific door in seconds, alerts administrators, and protects the rest of the ship.
Automated Incident Response Workflow
How our systems react within the first 60 seconds of anomaly detection:
Immediate Circuit Breaker
If an account fails multiple logins or exhibits unusual access patterns, the system freezes the session instantly.
Token Invalidation
All active login sessions for the affected user are killed across all laptops, phones, and tablets globally.
Leadership Alert
The District Administrator and GoodTalk Security Team receive immediate automated SMS and priority email notices.
Immutable Rollback
Backups are stored in "write-once, read-many" vaults immune to ransomware. Data can be restored to the exact prior hour.
Frequently Asked Questions by School Boards & Directors
Quick answers to the most common questions raised during school procurement and technology audits.