Trust & Safety
at Arbol

Protecting student data. Empowering your institution. Built for higher education.

At Arbol, trust is core to our mission. We work with colleges and universities to help students succeed without ever compromising their privacy, your institutional control, or compliance requirements.

We’re committed to data privacy & transparency

Arbol supports thousands of students across campuses, and every partnership is rooted in responsible data practices. We act as a school official under FERPA, ensuring your institution always retains control of student data. We never sell data, never re-use it without authorization, and never use it for advertising or AI training. Period.

Built for higher education, secured by design

Arbol is designed to meet the needs of procurement, IT, and compliance leaders in higher education. We follow security practices aligned with NIST 800-171, conduct annual third-party testing, and are audit-ready for SOC 2 Type II certification.

Our security infrastructure includes:

  • AES-256 encryption at rest, TLS in transit
  • Multi-factor authentication for admin access
  • Role-based access controls
  • Logging, monitoring, and audit trails
Privacy & Compliance

Built for colleges and universities

  • FERPA Compliant
  • HECVAT completed
  • NIST 800-171 aligned
  • SOC 2 Type II audit-ready
  • WCAG 2.1 AA compliant
  • VPAT available upon request
Incident Response

Prepared to respond. Committed to transparency

  • 24/7 security monitoring and anomaly detection
  • Breach notification to institutions within 72 hours
  • Coordinated response with your IT and legal teams
  • Post-incident analysis and documentation
Data Retention & Deletion

Only what you need, only as long as you might need it

  • Custom retention schedules based on your contract
  • Secure data destruction protocols
  • Certification of deletion available upon request
  • No data persists after contract termination unless explicitly agreed
Accessibility & Equity

Designed for inclusive student experiences

  • WCAG 2.1 AA compliant
  • VPAT available upon request
  • Continuous updates to ensure usability across devices and for all learners
Continuous Assurance

Trust is not a one-time event

  • Annual penetration testing
  • Internal privacy and security audits
  • SOC 2 Type II certification (if not yet completed, insert: in progress)

Frequently Asked Questions

1Is Arbol safe?
Absolutely. Arbol implements strong security measures including end-to-end encryption, secure cloud infrastructure, multi-factor authentication, and continuous monitoring. We also undergo third-party penetration testing and maintain audit-ready SOC 2 Type II controls.
2Does Arbol sell or share student data?
No. Arbol never sells, shares, or re-uses student data outside the scope of our agreement. We only process data to power the tools and services you select and only under your direction.
3 Is Arbol compliant with FERPA and other regulations?
Yes. Arbol is fully compliant with FERPA. We act as a School Official under the “School Official Exception” and operate under the direct control of our partner institutions. We also align with HECVAT, NIST 800-171, and maintain accessibility standards in line with WCAG 2.1 AA.
4Can we delete or export our data?
Yes. Your institution always owns the data. Upon request or contract termination, we securely delete your data following industry best practices and provide certification of deletion.
5 Is Arbol accessible to all students?
Yes. Arbol is WCAG 2.1 AA compliant and we offer a VPAT upon request. We are committed to ensuring our tools support all users, including those with disabilities.
6Does Arbol use student data to train AI models?
No. Arbol does not use any institutional or student data to train AI models. All data processing is purpose-limited, transparent, and under contract.

Trust Center

Need security documentation for your procurement or IT review process? We’re happy to share our latest HECVAT, SOC 2 summary, VPAT, or incident response policies.

Click here