Security & Compliance at Gradebot

Gradebot is an AI-powered grading and admissions platform built for education. We treat student records as FERPA-protected education data and design every system around that obligation. This Trust Center is where security and procurement reviewers can find our posture, policies, and documentation.

3 public documents 9 available on request NDA version 2026-06-15

Public documents

Freely available. No request required.

Accessibility
Accessibility

Accessibility Statement

Our WCAG 2.2 AA commitment, current conformance status, and how to report an accessibility barrier.

Overview
Overview

Information Security Policy (Overview)

Plain‑language overview of the information security program.

Overview

Privacy Policy

Privacy policy describing data practices and individual rights.

Available on request

Sensitive documents are shared after a short request and NDA acceptance. Requests from recognized institution domains are granted automatically.

Accessibility

VPAT / Accessibility Conformance Report

Criterion-by-criterion WCAG 2.2 Level AA conformance (VPAT 2.5Rev) — vendor self-assessment.

Legal

Ferpa DPA

FERPA-aligned Data Processing Addendum — School Official designation, data handling, retention, subprocessors, and safeguards.

Legal

Subprocessor Register

Current subprocessors that process or support Gradebot, the data each receives, and the data-processing agreement governing each.

Overview

Certifications & Independent Assessments

Current certification/assessment status.

Overview

Third‑Party Assessments & Certifications

Summary of third‑party assessments and certification status.

Questionaire

CSA AI‑CAIQ v1.0.2

Completed Cloud Security Alliance Consensus Assessment Initiative Questionnaire - AI module (v1.0.2).

Questionnaire

HECVAT v4.1.6

Completed Higher Education Community Vendor Assessment Toolkit (HECVAT) v4.1.6 self‑assessment.

Report

AI Quality & Development Self‑Assessment Report

Internal self‑assessment of AI grading quality and development practices.

Report

Security Testing & Validation

Security testing and validation approach.

Request access