← Security Hub
Security & Compliance at ThinkKits
A secure single source of truth for our compliance frameworks, security certifications, and policy document library. Rigorously engineered to satisfy strict district procurement standards.Certifications & Standards
Q4 2026 AUDIT
SOC 2 ReadinessPursuing Type II. Core cloud infrastructure vendors are SOC 2 certified.PII PROTECTION
FERPA CompliantStrict data silos. Only public directory data utilized, no student PII retained.ACCESSIBILITY
Section 508WCAG 2.1 AA design standards currently in progress with audit slated for 2026.NATIONAL DPA
SDPC-AlignedFormally aligned with SDPC National DPA framework. State-specific templates supported.Documentation Library
11 Resources AvailableSecurity OverviewHigh-level summary of security architectural practices and engineering controls.
View →Incident Response PlanOperational protocol for mitigating, reporting, and responding to system anomalies.
View →SDPC NDPA v2.1 AlignmentSatisfying 29 out of 32 key regulatory guidelines for state district protocols.
View →State DPA TemplatesStandard templates optimized for CA, TX, NY, FL, and 8+ participating states.
View →SLA PolicyCommitted 99.9% application availability metrics and performance benchmarks.
View →Privacy PolicyComprehensive guidelines describing strictly limited data usage and sharing.
View →Acceptable Use PolicyStandard terms defining proper utility boundaries of our educational tools.
View →FERPA ComplianceDetailed breakdown of safe data architectures preventing PII exposures.
View →COPPA ComplianceArchitectural alignment shielding under-13 student data from tracking.
View →Procurement Quick-StartSimplifying district review cycles with standardized security packages.
View →Data Quality & ValidationProtocols verifying educational content ingestion models.
View →Authorized Subprocessors
SUBPROCESSORPURPOSEDATA RESIDENCY
SupabasePrimary DatabaseUnited States
ClerkAuthenticationUnited States
StripeBilling EngineUnited States
PineconeVector DBUS AWS
Neo4jKnowledge GraphUS Railway
RailwayHosting EnvironmentUnited States
SentryError MonitoringUnited States
CloudflareCDN & Edge FirewallGlobal (US Primary)
100% US-Based OperationsAll infrastructure nodes, primary and standby database partitions, and development personnel are situated entirely inside the United States. No offshore data relaying.