Physical Server Security:
- All servers, application, and data are housed in AWS
- Only select admins have access to sensitive data and operations
- AWS compliance information can be found here: https://docs.aws.amazon.com/whitepapers/latest/introduction-aws-security/compliance.html
Application and Data Security / Privacy Policy:
- RCampus/iRubric authenticates users directly or using institutional Single SignOn systems in which case as it does not collect or require user passwords
- All data is transmitted from institutional systems are secured via SSL and security tokens
- Names are encrypted in the database
- Application runs in secure HTTPS mode at all time
- Application is scanned for intrusion by third party systems
- URL parameters are filtered by application for added security
Privacy Policy:
Information Collection and Use
iRubric may collect User Information from the LMS and Single SignOn systems to enable user identification for grading, ePortfolios, and other required operations. This data cannot include user password. Users’ names are encrypted in the database.
Information Sharing and Disclosure
Reazon does not rent, sell, or share User Information with other agencies except to provide information requested under the following circumstances:
- In order to respond to subpoenas, court orders, or legal process, or to establish or exercise our legal rights or defend against legal claims;
- In order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, or as otherwise required by law.
Reazon will first contact Licensee with a notification, should a disclosure of data be required as stated above.
Inappropriate Content, Advertising, Spam, etc.
To provide a safe environment for End Users, RCampus reserves the right to monitor any content that RCampus may find inappropriate. RCampus will first contact Licensee with a notification.
FERPA Compliance:
iRubric adheres to best practices to protect student information as prescribed by Family Educational Rights and Privacy Act (FERPA). Reazon will be considered a “School Official” (as that term is used in FERPA and its implementing regulations) and will comply with FERPA. See more at http://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html