Protecting student data at every step.
We protect student data with strong security practices, controlled access, and ongoing monitoring.
A strong security foundation
Ladderly uses industry-standard security practices to protect student information, from secure data storage and encryption to controlled access and ongoing system monitoring.
- Encryption in transit: TLS 1.2 with HSTS
- Encryption at rest: AES-256 on databases and object storage (GCP-managed).
How we protect your data
Encryption and controlled data access
Monitor security continuously and proactively
Manage data responsibly throughout its lifecycle
Protect
Data protection
We collect only the data needed to provide our services and use it only as authorized by our partner schools. Student data is encrypted in transit and at rest, and we never sell or use it to train AI.
Secure access
Student data is protected through role-based access controls, ensuring Ladderly employees only have access to the information they need. Access is regularly reviewed, and every team member completes security and FERPA training.
Monitor
Secure infrastructure
Our platform uses multiple layers of protection, including encryption, system monitoring, regular security updates, and secure backups. We also conduct ongoing risk assessments by end to end testing before every deployment and thorough penetration testing at least every six months.
Incident response
We follow a documented process to quickly detect, report, and resolve security incidents. If student data is affected, we notify impacted schools within 48 hours and work closely with the district to patch the problem promptly.
Manage
Data management
We retain student data only as long as the district is under contract. Upon a contract’s completion, we deliver a copy of all student data to the district and remove it from our database and from any service providers we use.
A culture of security
Technology is only part of a strong security program. Every member of our team shares responsibility for protecting student information. Employees receive ongoing security awareness and FERPA training, follow strict data handling practices, and are expected to report potential security concerns immediately. These processes help ensure security remains part of everything we do, not just our technology.
Security details for your technology review
District teams can request additional information about Ladderly’s current security practices, subprocessors, and data protection approach during procurement.
Need documentation?
We can help your team review security, privacy, and data handling questions before rollout.
Request a Walk-Through