Security Overview

Last Updated: September 14, 2026

This document summarizes the security practices Classvero uses to protect user data and support district procurement reviews.

Access Controls

  • Secure authentication
  • Role-based permissions
  • Least-privilege internal access

Data Protection

  • Encryption in transit and at rest
  • Secure cloud infrastructure
  • System monitoring

Operational Security

  • Access reviews and restrictions
  • Change monitoring and logs
  • Security awareness practices

Incident Response

  • Defined response procedures
  • Prompt investigation
  • District notification when applicable

Retention & Deletion

Data is retained only as needed for service delivery. Deletion is available upon request or contract termination; residual backups are removed on a rolling basis.

Subprocessors

Classvero may use vetted providers (hosting, AI processing) bound by confidentiality and data protection obligations.

Compliance Position

Classvero is not represented as independently SOC 2 or ISO 27001 certified. It is hosted on Base44 infrastructure, which states that its platform is SOC 2 Type II and ISO 27001 certified and encrypts app data in transit and at rest. Those platform certifications should not be interpreted as a separate certification of Classvero.

Security Contact

support@classvero.com


Classvero Legal Links