Trust & security

Security you can hand to your board.

Focus is built for districts that answer to auditors, unions, and parents. Governance is designed into the architecture — not bolted on.

Data

We collect the minimum, by design.

The less a system holds, the less there is to defend. Focus collects only what enforcing policy and proving compliance requires.

What we collect

Device enrollment identifiers, campus/schedule state, and policy events (what policy applied, when). Location is stored only per the org Monitoring policy — by default, only during an active lockdown.

What we never collect

No browsing history, no message or photo content, no keystrokes, no app content.

Retention

Compliance events are retained for your reporting period and then purged. Enrollment records end when a device is unenrolled.

Controls

How the platform is protected.

Encryption in transit & at rest

All traffic uses TLS; data at rest is encrypted with industry-standard AES-256.

SSO / SAML & role-based access

Admins sign in through your identity provider. Least-privilege roles separate district admins, school admins, and teachers.

Full audit log

Every policy change and lockdown is recorded, attributed, and exportable — the auditability our philosophy demands.

Runs alongside your MDM

Focus adds a control layer without taking over device management, so your existing security posture stays intact.

Compliance posture

Standards & frameworks.

Where we are today — stated plainly, because overstating certification is itself a security risk.

SOC 2

Type II audit in progress. We can share our current status and timeline under NDA during evaluation.

Student privacy laws

Built to support FERPA and COPPA obligations; we will sign a district data-privacy agreement (DPA) as part of onboarding.

Subprocessors & residency

A current subprocessor list and data-residency details are available on request for security review.

Certifications and audit status are stated as of this page's publication and confirmed in writing during procurement.

Doing a security review?

Request our security packet — architecture overview, subprocessor list, and DPA template.

Request the security packet →