Security & Data Protection

Please read this document carefully.

Last Updated: October 28, 2026

Education businesses trust Calimatic with family contact details, student records and payments. This page summarizes how we protect that data. For student-record obligations specifically, see our FERPA Compliance page, and for how we collect and use personal information, see our Privacy Policy.

Encryption

  • TLS encryption for all data sent between your users and Calimatic
  • AES-256 encryption for stored data

    • Access Controls

  • Role-based permissions, so staff, instructors, parents and students only see and edit what their role allows
  • Multi-factor authentication support for user accounts
  • Calimatic staff access to customer data is limited to what is needed to provide and support the service

    • Monitoring and Testing

  • Automated security monitoring
  • Regular penetration testing
  • Documented incident response procedures

    • Student Data and FERPA

  • You keep control of your student education records; we act on your instructions
  • We do not sell student personal information or use it for advertising
  • A Data Processing Agreement (DPA) is available for schools and institutions

    • Payments

    Card payments are handled by our payment processing partners rather than stored on Calimatic servers.

    Incident Response

    If a security incident affects your data, we will notify you promptly, cooperate with your investigation and take immediate steps to limit the impact.

    Report a Security Issue

    If you believe you have found a security vulnerability in Calimatic, please email hello@calimaticedtech.com with the details. Please do not publicly disclose the issue until we have had a chance to investigate and fix it.

    Questions

    For security questionnaires, a DPA or other security documentation, contact hello@calimaticedtech.com.