Independent controls
- SOC 2 Type II attained November 2025; scope: Security and Confidentiality criteria.
- ISO 27001 implementation in progress; gap analysis completed March 2026.
Security & trust
Verified safeguards. Clear human authority.
Lighter Week separates automatic preparation from the decisions that require a teacher or administrator.
Education privacy
- FERPA/COPPA compliant posture. Lighter Week acts as a School Official under FERPA. No data is collected directly from students.
Encryption and retention
- AES-256 at rest; TLS 1.3 in transit.
- Audit logs retained for 7 years; user data deleted within 30 days of account termination.
Access controls
- RBAC roles: Teacher, Department Lead, District Admin.
- SAML 2.0 supported for District tiers; MFA required for all Admin roles.
Data handling
Siloed customer data.
Customer data is siloed. Model fine-tuning uses anonymized datasets only.
Human approval boundary
- Automatic
- Data aggregation and summary drafting.
- Manual approval required
- Grading submission, family messaging, student support flags.
Bring your district questions.
Review access, data handling, and approval requirements with the Lighter Week team.