Certifications
SOC 2
Audited against the AICPA Trust Services Criteria for security, availability,
and confidentiality.
ISO 27001
Certified under the international standard for information security management
systems (ISMS).
ISO 27701
Certified extension to ISO 27001 covering privacy information management and
GDPR-aligned data handling.
Privacy standards
TruEnroll’s data handling practices are aligned with the privacy regulations that govern academic records and personal data across jurisdictions:| Standard | Coverage |
|---|---|
| FERPA | Protections for student education records in the United States |
| GDPR | Data subject rights, lawful basis for processing, and cross-border transfer requirements for the EU |
| CCPA | Consumer privacy rights and data transparency obligations in California |
| ISO 27701 | International privacy information management framework, extending ISO 27001 |
Security controls
- Encryption at rest and in transit. All data is encrypted at rest and all API communication is over TLS.
- Role-based access controls. Access to cases and results is scoped strictly to the submitting organization’s tenant.
- Automated audit trails. All case submissions, result accesses, and administrative actions are logged and retained for audit purposes.