Built for Higher Ed.
CampusMind's security, compliance and privacy posture, built on Microsoft Azure.
Microsoft Solutions PartnerData & AI (Azure)
Compliance
Policies and reports
3 public · 4 under NDA
- Privacy PolicyOpenPrivacy Policy
- Terms of ServiceOpenTerms of Service
- Accessibility StatementOpenAccessibility Statement
- SOC 2 Type II reportRequestSOC 2 Type II report
- HECVAT assessmentRequestHECVAT assessment
- VPAT reportRequestVPAT report
- Security policies (26)RequestSecurity policies (26)
Controls
89 controls from our SOC 2 Type II report
Corporate security
26- Organizational structure
- Code of conduct
- Management review meetings
Data security
23- Separation notification
- Access provisioning approval
- Privileged access restriction
Product security
16- Security alert review
- Security log retention
- Vulnerability scanning
Network and endpoint security
6- Network perimeter and firewall
- Secure remote access
- Endpoint protection
App security
9- Change approval workflow
- Pre-production testing
- Emergency change review
Physical and environmental security
9- Physical access control
- Visitor management
- CCTV surveillance
Subprocessors
3 providers · All under data processing agreements
Microsoft AzureCloud hosting, storage, identity and monitoringTheir certifications:SOC 2 Type IIISO 27001
GitHubSource code hosting and CI/CDTheir certifications:SOC 2 Type IIISO 27001
PipedreamThird-party application connectorsTheir certifications:SOC 2 Type II
FAQ
The questions security and IT teams ask most
Is data encrypted at rest and in transit?
Yes. All data is encrypted at rest by default using Azure-managed encryption, and protected in transit with TLS 1.2 or higher.
How is customer data segregated?
CampusMind integrates with each institution's own Microsoft Entra ID tenant. Sign-in from outside the institution's tenant fails at authentication, and customer data is logically segregated per tenant.
Will my data be shared with third parties?
Customer data is processed only by the subprocessors listed above, strictly for service delivery. Institutional data is never shared with third parties for training or marketing.
Is CampusMind FERPA compliant?
CampusMind is designed for US higher education and handles student education records in line with FERPA. A completed HECVAT assessment and VPAT report are available for institutional review.
Plus 2000+ more apps
CampusMind connects to your LMS, SIS, CRM and productivity tools. Search every connector, or tell us what your campus runs.
Security updates
Know when anything changes
We’ll email you when our certifications, policies or subprocessors change.