EverSpark FERPA Policy
Effective Date: January 1, 2026
EverSpark provides software and services to educational institutions and is committed to protecting the privacy and security of student education records in accordance with the Family Educational Rights and Privacy Act (FERPA).
Definitions
Education Records
Records that are directly related to a student and maintained by an educational institution or by EverSpark on behalf of an educational institution.
Personally Identifiable Information (PII)
Information that can be used to identify a student, including names, identifiers, or other data linked to a specific student.
School Official
EverSpark operates as a “school official” with a legitimate educational interest, as defined by FERPA, when performing services under contract with an educational institution.
Control and Use of Data
EverSpark processes student education records only as directed by the educational institution and solely for the purpose of providing the contracted services.
Student data remains under the control of the educational institution at all times.
Disclosure of Information
EverSpark does not disclose or re-disclose student PII except:
- As authorized by the educational institution
- As required to provide the contracted services
- As permitted by FERPA or other applicable laws
Data Security
EverSpark implements administrative, technical, and physical safeguards designed to protect student data from unauthorized access, disclosure, or misuse. Access to student data is limited to authorized personnel who require access to perform their job duties.
Access and Amendment Requests
Requests to access, review, or amend education records must be handled by the educational institution. EverSpark will assist institutions as required under applicable agreements.
Data Breach Notification
In the event of a data security incident involving student data, EverSpark will notify the affected educational institution without unreasonable delay and cooperate in remediation efforts.
Subprocessors
EverSpark may use trusted service providers to support its services. Any such subprocessors are required to maintain data protection standards consistent with EverSpark’s contractual and legal obligations.
Data Retention and Deletion
Student data is retained only for the duration specified in EverSpark’s agreement with the educational institution. Upon termination, data is returned or securely deleted in accordance with the agreement.
Policy Updates
EverSpark may update this FERPA policy periodically. Updates will be posted on our website and take effect upon publication.