Security, Compliance & Trust
At SAM Labs, the security of our platform and the protection of student and educator data are our top priorities. We adhere to industry-leading standards and undergo rigorous independent audits to ensure your information remains safe, available, and confidential.
SOC 2 Type I Compliant
We maintain SOC 2 compliance, verifying that our internal controls meet the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria. This ensures our systems are protected against unauthorized access and operational disruptions.
GDPR Compliant
SAM Labs complies with the EU General Data Protection Regulation (GDPR) and the UK GDPR. We act as a data processor on behalf of our customers, implementing appropriate technical and organizational measures to protect personal data. Data Processing Agreements (DPAs) are available upon request.
Our Security Commitments
Data Encryption
All data is encrypted in transit (TLS 1.2+) and at rest using industry-standard encryption protocols.
Privacy by Design
Student and educator data is treated with the highest level of care, following privacy-by-design principles across our platform.
Secure Infrastructure
Our platform runs on enterprise-grade cloud infrastructure with continuous monitoring and automated threat detection.
Regular Audits
Independent third-party audits verify that our controls meet the highest standards of security and availability.
Regulatory Compliance
FERPA
We support schools in meeting their Family Educational Rights and Privacy Act obligations. Student education records are handled under strict use, disclosure, and access controls. We never sell student data or use it for advertising.
COPPA
Built for educational use under the Children's Online Privacy Protection Act. We collect only the minimum data needed to deliver our services, and rely on schools to provide consent on behalf of parents for students under 13.
SOPPA
Compliant with Illinois' Student Online Personal Protection Act and aligned with similar state student privacy laws across the U.S. We sign Data Privacy Agreements with school districts, never sell student data, and do not use it for targeted advertising.
Request Our Security Report
Need more details? Fill out the form below and we'll send you our full SOC 2 report.