Trust and privacy
Student data deserves care. Here is how we handle it.
Written for privacy officers, IT security teams and anyone answering a security questionnaire about CampusIQ360.
Our commitments
Your data stays in Canada
Stored and processed in Amazon Web Services’ Canada (Central) region. Backups stay in Canada too.
Encrypted end to end
Files arrive through an encrypted, private drop. Data is encrypted in storage and travels only over HTTPS.
Each institution kept separate
Your data is used only to provide CampusIQ360 to you. It is never sold, pooled with other institutions, or used for another client.
Access by role, with multi-factor sign-in
Every user signs in with multi-factor authentication, one account per person. Executives see totals; only the roles you approve see named students, and every view of a student record or student list is logged. Sign-in through your institution’s single sign-on is supported at onboarding.
Only the data we need
We agree the table and field list with you and leave out what is not needed, such as street addresses and personal contact details. Sensitive identifiers are refused at upload.
Deleted when you leave
Retention and deletion terms are written into the data-sharing agreement, including how your data is returned and deleted at the end of the contract.
Numbers you can check
Trust in a dashboard is earned by showing your working. Every headline number links to a written business rule your registrar signs off, and before go-live the numbers are reconciled with your official reports.
- Checks run on every nightly file: missing tables, duplicates, unusual changes
- A file that fails its checks is held; yesterday’s numbers stay live
- Lineage from each figure back to the fields it came from
- An audit log of loads, changes and who viewed student records
Flags your staff can explain
When CampusIQ360 flags a student for follow-up, it shows exactly why: what happened, the written rule that raised the flag, and the records behind it. If a student asks why they were contacted, your staff can answer.
- Fixed rules a person can check, never hidden scores or predictions
- The source records shown as evidence, so errors are caught before anyone acts
- Your staff decide what to do; no automated decision is made about a student
- Every rule listed in one place for your privacy office
Privacy law and your approvals
CampusIQ360 is designed to support your obligations under provincial public-sector privacy law, such as Alberta’s Protection of Privacy Act (POPA), which replaced FOIP in 2025, and the freedom of information and protection of privacy acts in British Columbia and Ontario. We work with your privacy office on the privacy impact assessment before any data flows, and we notify you promptly of any breach so you can meet your own notification duties.
Data-sharing agreement
Purpose, residency, retention, deletion and breach notification timing, in writing, with Amazon Web Services in Canada as our only subprocessor.
Privacy impact assessment
We provide the data flows, fields and controls your privacy office needs to complete it.
Security questionnaire
We answer your institution’s questionnaire and share our security overview on request.
Questions from your security team?
Ask for our security overview, or bring your privacy officer to a demo.