Full privacy evaluation | See all
Thumbnail
Updated January 22, 2018

EduTone

  • Intended for children under 13.
  • Collection or use of data is limited to product requirements.
  • Unclear whether this product displays personal information publicly.
  • Users can interact with trusted users and/or students.
  • Unclear whether this product provides notice in the event of a data breach.
  • Parental consent is required.
Indicates that the product meets all our required privacy safeguards, but more research should be completed prior to use.
Use Responsibly
Full evaluation
60
Overall Scoreinfo-bubble

This overall score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

EduTone provides a cloud-based identity, access management, marketplace, and data analytics platform designed for educational institutions. EduTone's terms state they do not provide social interactions between students and adults, and do not make a user's information publicly visible. EduTone's terms state they collect personally identifiable information and non-personal information automatically. EduTone's terms state they use strict administrative and technical procedures to keep data safe and secure. In addition, EduTone’s terms state they do not knowingly collect any information from children under the age of 13 years of age, unless the School has obtained appropriate parental consent. EduTone states that COPPA does not apply to its Service, because children under the age of 13 are not the target users of the service, or allowed to register an account, or provide information to the Service.

EduTone can be accessed through its website. The Privacy Policy accessed for this evaluation can be found on EduTone’s website. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
9

The terms of EduTone state it does not provide social interactions between students and adults, and does not make a user's information publicly visible. However, the terms also describe a suite of related services targeted primarily to educators that support sharing content, and open discussions.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
65

The terms of EduTone state they collect personally identifiable information and non-personal automatically collected information. EduTone's terms state they will not sell, rent, or use student information to target students or their families for advertising or marketing purposes, or allow third party advertising networks to collect any information about the users of the services. EduTone's terms state they do not disclose any personal information relating to students, parents, or school officials to third parties without opt-in consent. Lastly, EduTone's terms state they contractually obligate third-party service providers to keep Student PII confidential and to only use it in order to fulfill their responsibilities.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
71

The terms of EduTone state they use strict administrative and technical procedures to keep data safe and secure. The terms also state that they maintain strict administrative, technical and physical procedures to protect information stored in their servers. The terms state access to information is limited (through multi-factor authentication) to those employees who require it to perform their job functions. In addition, EduTone's terms state that the vendor conducts thorough background checks for employees, as well as conducting comprehensive activity audits and ensuring that their work is entirely separate from the rest of our team.

Moreover, the terms describe multiple measures that EduTone has implemented measures designed to secure PII from accidental loss and from unauthorized access, use, alteration and disclosure. All PII is securely stored behind firewalls in a private cloud environment, and all environments are equipped with intrusion detection systems. The terms state that PII is encrypted at rest and in transit to and from the Service using industry-standard encryption technology. Lastly, Edutone's terms state they follow the Department of Education's recommendations to only store information in jurisdictions specific to their users.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
58

EduTone’s terms state they do not knowingly collect any information from children under the age of 13, unless the School has obtained appropriate parental consent. EduTone's terms state that COPPA does not apply to its Service, because children under the age of 13 are not the target users of the service, or allowed to register an account, or provide any information to the Service.

However, under FERPA, EduTone requires access to certain student Information or educational records to remain the legal responsibility of the applicable school. EduTone's terms state they will only use personally identifiable information from student education records to enable school officials and parents access and use the services provided by EduTone. Before a school can upload, access or share any data concerning a student with a third party, the school must confirm that they have obtained verifiable parental consent from the parent or guardian of that student, or determined a limited exception under FERPA.

Moreover, the terms state that before EduTone discloses information in response to a legal request, they will contact the School with notice of the requirement, so the School may choose to seek a protective order or other remedy, if applicable. Lastly, EduTone self certifies with the privacy shield safe harbor and has signed the Student Privacy pledge.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.