Data Ownership
Schools retain ownership of their school-controlled school and student data. EduSlip processes customer information only as necessary to provide, secure, support, and improve the contracted services.
Trust & Security
Built for school-controlled workflows.
EduSlip uses Firebase and Google Cloud infrastructure, Firebase Authentication, Firestore security rules, and server-side checks to protect school-scoped product data.
No Sale Or Student Advertising
EduSlip does not sell student, school, parent, donor, supporter, employee, or customer data. EduSlip does not use student data for targeted advertising.
Access Control
EduSlip products use authenticated accounts, role checks, school membership records, and server-side authorization for sensitive workflows. Administrative access is not granted from a public self-registration path.
Payments
Supported payment workflows use Stripe. Payment status changes are handled through authenticated backend workflows or verified payment webhooks. EduSlip applications do not store payment-card numbers.
Public Links
Some pages are intentionally public, such as live fundraiser pages. Private bearer links, including invoice and setup links, use unguessable tokens and return only the fields needed for the workflow.
Audit Logging
Selected administrative, billing, and pass actions are logged. EduSlip does not currently claim comprehensive audit logging for every product action.
Subprocessors
Verified subprocessors include Firebase/Google Cloud for infrastructure, Stripe for supported payments, SendGrid for supported email delivery, and Google Sign-In/Firebase Auth providers for authentication where configured.
Reliability And Recovery
EduSlip uses Firebase and Google Cloud services. Backup, point-in-time recovery, and storage-versioning commitments depend on the settings enabled for each production project.
Procurement FAQ
EduSlip can provide school security questionnaire responses using verified implementation details. EduSlip does not claim FERPA certification, COPPA certification, GDPR compliance, SOC 2, ISO certification, HIPAA compliance, guaranteed uptime, or comprehensive disaster recovery unless separately documented and approved.
Security questions: support@eduslip.com