AdaptAdapt Learning home

Security & data

Your students’ data, in plain terms.

How Adapt handles your students’ data: who can see it, where AI is used, where it’s stored, and what we don’t have yet.

Who can see what

Your organization, and nobody else’s.

Every program’s data is walled off from every other program’s, enforced by the database itself rather than by app code alone. An instructor sees their own organization. A student sees their own work.

Coach conversations stay with the student.

Instructors see how much a student uses the AI coach, never what they asked it.

Anonymous questions stay anonymous.

When a student asks their instructor a question anonymously, their name isn’t attached to it.

Where AI is used, and what it sees

Every AI call in Adapt goes through Google’s Vertex API, Google Cloud’s enterprise service for its Gemini models.

Building lessons from the standard course.

It sees the learning objectives in your course outline, passages from public reference sources, and your module titles. It never receives student data or files you upload.

Anything from your program or your students.

Students’ questions to the AI coach and any file you upload go here and nowhere else, under zero data retention: the Vertex API keeps no copy of either.

The Vertex API doesn’t use your content or your students’ data to train AI models.

If you upload a file

Most programs start from the standard course and never upload anything. If you do, the file goes from our server to the Vertex API and nowhere else. It is never written to a database, it is deleted once we’re finished processing it, and it is never used to train AI models. What stays is the course you build.

How the rest of it is built

Built to work within FERPA.

We act as a school official under your institution’s direction. Student records are used only to run your program, never sold, never used to train AI, and returned or deleted when our agreement ends. A FERPA Data Processing Addendum is ready for your review.

Stored in the US, encrypted.

Student data lives on Google Cloud in the United States and is encrypted in transit and at rest.

No ads, and no data sold.

We don’t run advertising, use session recording, or sell data to anyone. Our one analytics tool, Mixpanel, never receives names or email addresses.

Designed to WCAG 2.1 AA

Contrast, focus states and reduced-motion behaviour are held to AA as the design target for a tool instructors use daily. We audit against it; we do not claim a completed certification.

What we don’t claim yet

Your IT team will ask about these, so here they are up front.

  • We are not SOC 2 certified, and no audit is underway.
  • We have no FERPA, COPPA, HIPAA or GDPR attestation. We do have a FERPA Data Processing Addendum drafted for institutional agreements, but no third party has audited our practices against any of those frameworks.
  • We have not had a third-party penetration test.
  • We have no signed institutional customer yet, so nothing here has been tested by a real procurement review.

If one of these is a blocker for your institution, tell us which and we’ll give you a straight answer on timing. Write to support@adaptlearning.io.

Our privacy policy, terms and subprocessor list cover both the mobile app and institutional use of the portal, including our role as a processor for student data. An Enterprise Master Services Agreement and a FERPA Data Processing Addendum are available for procurement review on request.

Questions your IT team will ask?

Bring them to us early. We’d rather answer them now than have them come up after your program has launched. You can also look around the portal with a sample EMT class before anyone signs anything.

Free for instructors and admins. No card needed.

Book a demoEmail support@adaptlearning.io