Services Process Security Contact

Security,
clarity,
and control.

Enroll More is built for school-directed data work with a clear operating model: written agreements, minimum-necessary access, secure document exchange, and a defined closeout process when the work is complete.

FERPA-aware model

Built around school control.

Our approach is designed around a FERPA-aware school-official model for a narrow outsourced function the school would otherwise perform internally.

The school defines the purpose, the approved data elements, the access boundaries, and the closeout expectations. Enroll More works inside that structure.

What schools can expect
  • Written agreements before student-level file sharing
  • Minimum-necessary data for the specific project
  • Use limited to the contracted school engagement
  • No redisclosure except as authorized and permitted
  • Return or deletion of partner-held copies at project close
01. ACCESS

Controlled access

  • Named personnel only
  • Multi-factor authentication on accounts that access school data
  • Least-privilege access wherever feasible
  • No unmanaged personal-device storage
02. TRANSFER

Secure exchange

  • Secure transfer methods such as Box or another approved environment
  • No ordinary student-file email attachments as the default workflow
  • School-directed intake and handoff
  • Versioned working files and cleaner final deliverables
03. RESTRICTIONS

Use restrictions

  • No AI training on school-provided data
  • No generalized commercial datasets
  • No student-data marketing use
  • No broad data requests unrelated to project scope
Agreements and review

Written before data moves.

Before receiving student-level files, Enroll More expects a written services agreement and data sharing agreement that defines scope, purpose, controls, and closeout timing.

If a school requires a vendor questionnaire, W-9, contract packet, or security review materials, those can be addressed as part of onboarding.

Where third-party platforms are used, Enroll More prefers established vendors with documented security programs and independent compliance attestations, including SOC reports where applicable.

Retention and deletion

Closeout is part of the work.

School records remain the school’s records. Enroll More’s working copies are handled according to the agreement and the school’s closeout instructions.

At project end, partner-held copies can be returned, securely deleted, or handled through an agreed wind-down period, with written deletion confirmation available if requested.

The goal is simple: useful access during the project, then a clean and documented closeout when the work is finished.

Incident response

Clear response expectations.

If Enroll More becomes aware of an actual or reasonably suspected unauthorized access to school-provided data, the school is notified without unreasonable delay and the issue is investigated and contained.

The response model is straightforward: notice, available details, containment, and cooperation on follow-up actions.

Operational baseline
  • Company-controlled environment for project files
  • Secure transfer location before intake begins
  • Named contacts and approved scope before student-level files move
  • Documented closeout and deletion timing when required

Need the security
setup reviewed first?