This addendum applies to all Schools using Inscriti.

1. FERPA Compliance

Inscriti operates as a “school official” with legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), to the extent applicable.

We process student data only:

• On behalf of the School.

• For educational purposes.

• Under the direction of the School.

2. Use of Student Data

Student data is used solely to:

• Provide communication tools.

• Enable school operations.

• Support educational activities.

We do not:

• Sell student data.

• Use student data for advertising.

• Build external profiles.

3. Data Security

We implement safeguards including:

• Secure cloud infrastructure.

• Access controls.

• Authentication systems.

4. Data Access & Deletion

Schools may:

• Request access to student data.

• Request correction or deletion.

Upon termination, data may be deleted upon request.

5. Subprocessors

Inscriti may use third-party providers (e.g., AWS) to process data. These providers are required to maintain appropriate security standards.