Encryption
End-to-End Data Encryption
All data in transit is encrypted with TLS 1.2 or higher across every ConciergePad app, the admin portal, and all API calls. All data at rest is encrypted using AES-256 on AWS infrastructure.
- TLS 1.2+ on all data in transit
- AES-256 encryption at rest on all AWS storage
- Encrypted API calls between all services
- Secure key management via AWS KMS
Access Control
Role-Based Access & Authentication
User roles are clearly defined across every ConciergePad account. Administrators control who can see what, and our support team only accesses your account with your knowledge and for a specific technical reason.
- Granular role-based permissions per campus
- Multi-factor authentication support
- Google SSO & Microsoft SSO integration
- Automatic session timeouts
Data Privacy
We Never Sell Your Data. Ever.
We will never sell, rent, or share your visitor, student, or employee data with third parties for advertising or marketing purposes. Your data is yours. We are custodians of it, not owners of it.
- No data sales — period
- No advertising targeting of students
- FERPA and COPPA compliant data handling
- Staff access limited to support scenarios only
Infrastructure
100% Cloud-Based on AWS
All ConciergePad data is hosted exclusively on Amazon Web Services in the United States. AWS is the gold standard for cloud security — the same infrastructure used by the U.S. government and the world's largest enterprises.
- Hosted in AWS US-East data centers
- Automated daily backups with point-in-time restore
- Disaster recovery and geo-redundancy built in
- Real-time health monitoring and alerting
Student & Visitor Data
FERPA & COPPA Compliance
Student data is governed by FERPA and COPPA. We only access Student Data as directed by the School and only to deliver the contracted Services. We never interact with students directly and we never use Student Data for any other purpose.
- Student Data used only to deliver Services
- Schools control all student data permissions
- No direct student interaction — ever
- Contractual data protection agreements per school
Biometric Data
Facial Recognition — Strict Controls
Our optional facial recognition feature is adults-only, 100% opt-in, and all biometric embeddings are stored exclusively in secure cloud infrastructure — never in ConciergePad's own servers or databases. Facial data is permanently deleted upon unenrollment.
- Never used with minors under any circumstances
- Raw images deleted immediately after processing
- Embeddings stored in isolated, encrypted cloud infrastructure
- Permanently and irrecoverably deleted upon unenrollment
Breach Response
What Happens If Something Goes Wrong
In the unlikely event of a security breach, ConciergePad will notify affected customers electronically as soon as possible so they can take appropriate protective steps. We will post public notice on the Site if a breach occurs. Our incident response process is documented, tested, and ready.
For ongoing status and uptime information, visit conciergepad.statuspage.io. For any security concerns, contact us directly at support@getconciergepad.com.
