> ## Documentation Index
> Fetch the complete documentation index at: https://docs.truenroll.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance

> TruEnroll's security certifications and data handling standards.

TruEnroll is designed for environments with strict data requirements. It provides built-in
support for FERPA, CCPA, GDPR, and international privacy standards, with automated audit
trails, role-based access controls, and encryption at every stage.

## Certifications

<CardGroup cols={3}>
  <Card title="SOC 2" icon="shield-check">
    Audited against the AICPA Trust Services Criteria for security, availability,
    and confidentiality.
  </Card>

  <Card title="ISO 27001" icon="lock">
    Certified under the international standard for information security management
    systems (ISMS).
  </Card>

  <Card title="ISO 27701" icon="user-shield">
    Certified extension to ISO 27001 covering privacy information management and
    GDPR-aligned data handling.
  </Card>
</CardGroup>

## Privacy standards

TruEnroll's data handling practices are aligned with the privacy regulations that govern
academic records and personal data across jurisdictions:

| Standard      | Coverage                                                                                            |
| ------------- | --------------------------------------------------------------------------------------------------- |
| **FERPA**     | Protections for student education records in the United States                                      |
| **GDPR**      | Data subject rights, lawful basis for processing, and cross-border transfer requirements for the EU |
| **CCPA**      | Consumer privacy rights and data transparency obligations in California                             |
| **ISO 27701** | International privacy information management framework, extending ISO 27001                         |

## Security controls

* **Encryption at rest and in transit.** All data is encrypted at rest and all API communication is over TLS.
* **Role-based access controls.** Access to cases and results is scoped strictly to the submitting organization's tenant.
* **Automated audit trails.** All case submissions, result accesses, and administrative actions are logged and retained for audit purposes.

## Requesting documentation

For SOC 2 reports, ISO certificates, or a security questionnaire, contact
[support@truenroll.com](mailto:support@truenroll.com).