FERPA Compliance at The Home Health Pro

We Are a School Official

We act as a "school official" under FERPA when we process student records on behalf of your DPT program. Your institution remains the data controller. We operate under your direction and use student data solely to deliver the curriculum services you have contracted for.

This means we are bound by the same obligations as your own faculty and staff when handling education records. We do not sell, share, or use student data for any purpose outside of providing the platform to your program.

What Student Data We Store

We store only the minimum information required to run the curriculum:

• Full name and school email address
• Cohort and program assignment
• Module progress and section completion status
• Quiz attempts and scores
• Activity responses and discussion entries
• Instructor feedback on submitted work

We do not store Social Security numbers, dates of birth, health or medical records, financial records, or any other sensitive identifiers beyond what is listed above.

Subprocessor List

72-Hour Breach Notification

We commit to notifying your institution's primary contact within 72 hours of confirming any breach involving student data. This SLA matches the GDPR standard and the expectation of university procurement and IT security offices.

Notification will include: nature of the incident, categories of data affected, estimated number of student records involved, steps taken to contain the breach, and recommended actions for your institution.

Deletion and Retention Policy

On contract termination, all student records are deleted from production systems within 30 days of your written request. Database backups containing student data age out within 90 days of creation.

We do not retain student data beyond the minimum required to fulfill our contractual obligations and comply with applicable law.

Your Audit Rights

Your institution may request an audit of our data handling practices once per contract year with 30 days notice. Audits may be conducted via questionnaire, documentation review, or third-party assessment at your election and your cost.