Skip to main content

Edugator

FERPA Addendum

Last Updated August 18, 2026 · Version 1.1

What is FERPA?

FERPA, the Family Education Rights and Privacy Act, is an American federal law that governs how institutions protect student Education Records.

FERPA does this by:

  • Outlining students' rights concerning their Education Records
  • Establishing conditions for when student Education Records can be shared with third parties

What does FERPA do?

In short, FERPA does three things:

  1. Defines "Education Records"
  2. Ensures students' rights to inspect their own Education Records and to request amendments to inaccurate information
  3. Requires that university officials receive students' consent before disclosing student Education Records to third parties

What is an 'Education Record', according to FERPA?

According to FERPA, Education Records are those academic records, files, documents, and other materials which (i) contain information directly related to a student and are (ii) maintained by an educational institution.

Education Records include:

  • Academic transcripts, including official documents related to grades
  • Disciplinary records
  • Financial aid and student billing records related to the student

What is not considered an 'Education Record', according to FERPA?

FERPA defines "Directory Information" as information contained in an education record of a student that would not generally be considered harmful or an invasion of privacy if disclosed.

According to FERPA Directory Information includes a student's:

  • Name
  • address
  • telephone listing
  • electronic mail address
  • photograph
  • date of birth
  • major field of study
  • grade level
  • dates of attendance
  • honors and awards received.

Under FERPA, institutions and school officials may disclose Directory Information to third parties without students' consent. Students may generally ask their institution to opt out of the disclosure of their Directory Information.

FERPA Compliance: Edugator

Edugator acknowledges that it may be considered a "school official" under FERPA — a party performing an institutional service or function for which the institution would otherwise use its own employees (34 CFR § 99.31(a)(1)(i)(B)). In that capacity, Edugator commits to the following:

  • Institutional ownership and control. The institution (and its instructional staff, as applicable) retains all right, title, and interest in the student data and Education Records made available to Edugator. Edugator does not own, control, or license that data, and it uses and maintains the data under the direct control of the institution.
  • Legitimate educational interest. Edugator accesses and processes Education Records only under a legitimate educational interest, as defined by the institution — that is, to perform the institutional service or function for which it was engaged.
  • Limited use. Edugator accesses and processes Education Records and personally identifiable information solely to provide and support the Edugator service to the institution and its users. Edugator does not use this data for its own independent purposes.
  • No sale or advertising. Edugator does not sell student data and does not use it for advertising or marketing.
  • No unauthorized redisclosure. Consistent with 34 CFR § 99.33(a), Edugator does not disclose Education Records or personally identifiable information to third parties except (i) as directed or authorized by the institution, (ii) to service providers acting on Edugator's behalf, under confidentiality obligations, to deliver the service, or (iii) where required by law or valid legal process. Edugator treats student and instructional-staff data as confidential and does not treat it as Directory Information.
  • Security. Edugator maintains reasonable administrative, technical, and physical safeguards designed to protect Education Records against unauthorized access, use, or disclosure.
  • Incident notification. Edugator will notify the institution without unreasonable delay upon confirming any unauthorized access to, use of, or disclosure of Education Records.
  • Access, amendment, and deletion. Students may request the deletion of their user profile and personal data at any time via in-app settings or by contacting legal@edugator.app. Edugator will fulfill these requests, except where the institution requires specific Education Records to be retained for official academic, grading, or legal compliance purposes, in which case Edugator will work with the institution to process the request appropriately.
  • Retention, return, and destruction. Edugator retains personal information and Education Records only for as long as necessary to provide the service, or as otherwise directed by the institution or required by law, and will return or destroy Education Records upon the institution's request or at the end of the applicable service relationship.

You are responsible for the accuracy and lawfulness of the data you provide to Edugator and for obtaining any consents required under FERPA or applicable institutional policy before making student data available to us. Where a separate data protection agreement or contract between Edugator and your institution addresses these matters, that agreement controls to the extent of any conflict with this Addendum.

By using Edugator, you accept our data collection, usage, and deletion practices pursuant to these terms and FERPA standards.