
COMPLIANCE & REGULATORY STANDARDS
We maintain the highest standards of compliance with educational regulations, data protection laws, and accessibility requirements.
Last updated: December 2024
COPPA
Children's privacy protection compliance
FERPA
Educational records privacy protection
ADA/WCAG
Accessibility standards compliance
SOC 2
Data security and protection standards
Our Commitment to Compliance
MathYourMind is committed to maintaining the highest standards of compliance with educational regulations, data protection laws, and accessibility requirements. We understand the critical importance of protecting student privacy and ensuring our platform meets all applicable legal and regulatory standards.
Our compliance framework is regularly reviewed and updated to ensure we continue to meet evolving regulatory requirements and industry best practices.
COPPA Compliance (Children's Online Privacy Protection Act)
Overview
MathYourMind is fully compliant with COPPA, which protects the privacy of children under 13 years of age online. We take special care to protect young learners' personal information and maintain transparency with parents and guardians.
Our COPPA Practices
- Obtain verifiable parental consent before collecting personal information from children under 13
- Collect only the minimum information necessary for educational purposes
- Provide clear notice to parents about our data collection and use practices
- Allow parents to review, update, or delete their child's information
- Never use children's personal information for advertising or commercial purposes
- Implement enhanced security measures for children's data
- Regularly audit our practices to ensure ongoing compliance
Parental Rights
Parents and guardians have the right to:
- Review their child's personal information
- Direct us to delete their child's personal information
- Refuse to permit further collection or use of their child's information
- Receive notification of any material changes to our privacy practices
FERPA Compliance (Family Educational Rights and Privacy Act)
Educational Records Protection
MathYourMind complies with FERPA regulations regarding the privacy of student educational records. We understand our responsibilities as an educational service provider and maintain appropriate safeguards for student educational information.
FERPA Compliance Measures
- Treat educational records with appropriate confidentiality
- Limit access to educational records to authorized personnel only
- Provide parents and eligible students with access to their educational records
- Allow parents and eligible students to request amendments to inaccurate records
- Obtain consent before disclosing personally identifiable information
- Maintain audit trails of record access and disclosure
- Provide annual notification of FERPA rights
Directory Information
We treat all student information as non-directory information unless explicitly designated otherwise by the educational institution or parent/guardian, providing maximum protection for student privacy.
Accessibility Compliance
ADA and Section 508 Compliance
MathYourMind is committed to ensuring our platform is accessible to all users, including those with disabilities. We strive to comply with the Americans with Disabilities Act (ADA) and Section 508 of the Rehabilitation Act.
WCAG 2.1 AA Standards
Our platform is designed to meet Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards:
- Keyboard navigation support for all interactive elements
- Screen reader compatibility and proper semantic markup
- High contrast ratios and customizable visual settings
- Alternative text for images and multimedia content
- Captions and transcripts for video and audio content
- Consistent navigation and user interface design
- Error identification and suggestion mechanisms
AR/VR Accessibility
We are pioneering accessibility in AR/VR educational experiences by implementing:
- Audio descriptions for visual elements in VR environments
- Haptic feedback options for enhanced tactile learning
- Adjustable motion and comfort settings
- Alternative input methods for users with motor impairments
- Customizable user interfaces for different accessibility needs
Data Security and Protection
Security Standards
We implement industry-leading security measures to protect student and user data:
- SOC 2 Type II compliance for data security controls
- End-to-end encryption for data in transit and at rest
- Multi-factor authentication for enhanced account security
- Regular security audits and penetration testing
- Incident response procedures and breach notification protocols
- Staff security training and background checks
- Secure development lifecycle practices
International Data Protection
For international users, we maintain compliance with relevant data protection regulations including GDPR (General Data Protection Regulation) where applicable, ensuring appropriate safeguards for cross-border data transfers.
Educational Technology Standards
Student Data Privacy Consortium
MathYourMind adheres to the Student Data Privacy Consortium's best practices for educational technology providers, ensuring responsible handling of student information throughout our platform.
IMS Global Standards
We support interoperability standards from IMS Global Learning Consortium, including:
- Learning Tools Interoperability (LTI) for seamless integration
- QTI (Question and Test Interoperability) for assessment compatibility
- OneRoster for secure data exchange with educational institutions
- Caliper Analytics for learning analytics standards
Vendor and Third-Party Compliance
Due Diligence Process
All third-party vendors and service providers undergo rigorous compliance review:
- Security and privacy assessments before engagement
- Contractual requirements for compliance with educational regulations
- Regular audits and compliance monitoring
- Data processing agreements with strict privacy protections
- Incident reporting and response coordination
Cloud Infrastructure Security
Our cloud infrastructure partners maintain enterprise-grade security certifications including SOC 2, ISO 27001, and FedRAMP compliance, ensuring robust protection for all educational data.
Compliance Monitoring and Reporting
Regular Assessments
- Quarterly compliance reviews and internal audits
- Annual third-party security and compliance assessments
- Continuous monitoring of regulatory changes and updates
- Staff training and certification programs
- Incident tracking and compliance metrics reporting
Transparency Reports
We publish annual transparency reports detailing our compliance efforts, security incidents (if any), and improvements made to our privacy and security practices.
Compliance Support and Resources
For Educational Institutions
We provide comprehensive compliance support for educational partners:
- Data Processing Agreements (DPAs) and Business Associate Agreements
- Security and privacy documentation packages
- Compliance questionnaire responses and certifications
- Technical implementation guides for secure integration
- Training materials for administrators and educators
Compliance Resources
- Privacy Policy and Terms of Service documentation
- Security whitepaper and compliance certificates
- Accessibility conformance reports (ACR)
- Data retention and deletion procedures
- Incident response and notification protocols
Contact Our Compliance Team
For compliance-related questions, requests, or concerns, please contact our dedicated compliance team:
MathYourMind Compliance Team
General: compliance@mathyourmind.org
Privacy: privacy@mathyourmind.org
Security: security@mathyourmind.org
Phone: +1-310-800-2242
Address: Redondo Beach, CA, US
Reporting Compliance Concerns
If you have concerns about our compliance practices or wish to report a potential violation, please contact us immediately. We take all compliance concerns seriously and will investigate promptly while maintaining appropriate confidentiality.
Confidential Reporting
You may report compliance concerns anonymously through our secure reporting portal or by contacting our compliance hotline.
This Compliance page is effective as of December 2024 and reflects our current compliance practices and commitments.
