Higher-Ed Trust
Security, Privacy & Procurement
PathCheck is designed to support institutional reviews covering FERPA, accessibility, security, privacy, and procurement requirements. Our architecture prioritizes tenant isolation, role-based access, auditability, and secure handling of student information.
FERPA-aligned architecture
Tenant-isolated by design
Built for higher-ed security review
Procurement-ready documentation
01
Student Data Protection
The foundation of how PathCheck handles student information.
HTTPS / TLS encryption
All traffic between students, staff, and PathCheck is encrypted in transit.
Encrypted database storage
Student records are stored in an encrypted, managed Postgres database.
Tenant-isolated records
Each institution's data is scoped and isolated at the database layer.
Role-based access
Directors, coordinators, reviewers, and viewers see only what their role permits.
Audit logging
Key actions are recorded with actor, timestamp, and context.
02
Security Controls
Security measures implemented to protect student information and reduce operational risk.
Cloudflare Turnstile Protection
Prevents automated and bot-generated submissions.
Duplicate Submission Detection
Flags potential duplicate student applications for staff review.
Risk-Based Submission Review
Identifies suspicious or unusual submission patterns.
Role-Based Access Control
Access is limited based on assigned institutional roles.
Tenant Isolation
Student data is isolated by institution using database-level controls.
Audit Logging
Key actions are recorded for accountability and review.
03
FERPA-Aligned Architecture
PathCheck is designed to support institutional efforts to protect student education records through tenant isolation, role-based access controls, audit logging, and secure handling of student information.
04
Tenant Isolation
Each institution's data is separated using tenant-scoped database controls and row-level security. Users only access records associated with their institution and assigned role.
05
Access Controls
College admins can manage users, assign roles, and control access for directors, coordinators, reviewers, and viewers.
06
Audit Trail
PathCheck records key operational events, including application review activity, eligibility changes, staff notes, and administrative actions.
07
Hosting & Infrastructure
PathCheck is hosted on managed cloud infrastructure using encrypted storage, automated backups, and tenant-isolated database architecture. Security updates, infrastructure monitoring, and operational controls are designed to support institutional reliability and data protection expectations.
08
Security Incident Response
PathCheck maintains processes for identifying, investigating, and responding to security incidents affecting customer data. Institutions will be notified in accordance with contractual obligations and applicable requirements.
09
Student Information System Integration
PathCheck supports modern integration patterns for student information systems through APIs, secure file exchange, and event-based workflows.
10
Data Ownership
Institutions retain ownership of their data. PathCheck acts as a service provider supporting institutional student support workflows. Data export and offboarding support are available, and configurable retention controls are on the product roadmap.
11
Procurement & Security Review Materials
Documentation prepared for security and procurement review.
Available on Request
Security Overview
Available on Request
FERPA Alignment Summary
Available on Request
Architecture Overview
Available on Request
Data Flow Diagram
Available on Request
Vendor Questionnaire Support
Coming Soon
HECVAT Lite Roadmap
12
Enterprise Security Roadmap
Capabilities planned for larger institutional deployments.
SSO / SAML
MFA
Advanced audit exports
Data retention controls
SIS integration security review
Security questionnaire support
Accessibility Focused
WCAG 2.1 AA design goals and accessibility roadmap.
VPAT Available
Documentation available upon request.
FERPA-Aligned Architecture
Tenant-isolated design with role-based access controls and auditability.
Need this for your security review?
Security documentation, architecture information, and procurement support materials are available upon request.