Skip to main content

FERPA and student records

This article summarizes FERPA-oriented controls in SpeechGradebook for institution reviewers. It is not legal advice — work with your institutional counsel and FERPA officer for binding determinations.

Education records​

Student speech evaluations, scores, feedback, and associated media may constitute education records under FERPA when maintained by the institution or on its behalf.

Access controls​

  • Instructors access only their own courses and students.
  • Admins access data within their department or institution per policy.
  • Supabase row-level security enforces these boundaries at the database layer.

See Roles and data access.

Audit logging​

Access to student evaluation data is recorded in audit logs with user identity, purpose, timestamp, IP address, and user agent. Admins can verify logging under Settings → Admin → Compliance.

Student consent is required before cloud storage and broader data use. See Consent and data storage.

Additional resources​

  • Privacy policy
  • Internal engineering assessment: docs/FERPA_COMPLIANCE_GUIDE.md in the repository (for implementers)