How we protect walkthrough data, student records, and staff information for the schools and districts that use TheWalkInsights.
TheWalkInsights is built for K-12 schools and exceeds FERPA compliance standards. Student records are only accessible to authorized school officials with a legitimate educational interest, and districts retain full ownership of their data.
All traffic is served over HTTPS/TLS. Data is encrypted at rest in our database and file storage. Passwords are hashed with bcrypt — never stored in plain text.
Walkthrough observations, student information, and staff records are never sold, shared with advertisers, or used to train third-party AI models.
Every account has a role — teacher, coach, observer, org admin, parent — and every API endpoint enforces it. Teachers see their own data; parents see only their child; admins are scoped to their organization.
Every organization’s data is scoped by organization ID at the query level. One district can never see another district’s walkthroughs, students, or staff.
Logins, data changes, and administrative actions are recorded in an audit log so district admins can review who did what and when.