FERPA Statement

February 19, 2026

Family Educational Rights and Privacy Act (FERPA) Compliance Statement

CodeSignal is committed to protecting student education records in accordance with the Family Educational Rights and Privacy Act (FERPA). When supporting educational institutions, CodeSignal acts as a “school official” with a legitimate educational interest and processes student information solely to provide authorized assessment and skills development services.

We collect only the limited information necessary to deliver our services, such as name, email address, IP address, assessment responses, and scores. CodeSignal does not collect Social Security numbers, financial information, or health data.

Student data is encrypted in transit (TLS 1.2+) and at rest (AES-256), protected through role-based access controls and multi-factor authentication, and hosted in secure AWS environments. We maintain SOC 2 Type II certification and conduct regular third-party security testing.

CodeSignal does not sell student data. Education records are disclosed only to the contracting institution and authorized service providers supporting our platform under strict confidentiality obligations.

We support our institutional partners in fulfilling FERPA access, correction, and deletion requests. Please direct any questions to privacy@codesignal.com

CodeSignal Legal Team