HIPAA and FERPA compliant software development

What compliance looks like in our builds

Compliance is an engineering decision, not a checkbox at the end. We build it into the architecture: least-privilege access, encryption in transit and at rest, audit logging, data minimisation, and alignment with NIST CSF 2.0.

• Role-based portals and least-privilege access control
• Encryption in transit and at rest, audit trails on sensitive actions
• Data minimisation and retention controls
• Cloud-native on Azure and Google Cloud, aligned with NIST CSF 2.0

Proven in production, not on paper

Our HIPAA/FERPA work is live across US schools: multi-rater behavioral and wellness assessment platforms and academic-skills inventories, serving thousands of educators and students. These are real systems handling real student data under real regulation.

Selected work

• BIMAS-3The Behavior Intervention Monitoring Assessment System (BIMAS-2) measures behavioral functioning and social-emotional skills in children and adolescents from pre-K to age 18, for universal screening and progress monitoring.
• CAWSThe Children and Adolescent Wellness Scale assesses social-emotional competencies across 10 psychological domains. Schools run universal screening windows rated by teachers, parents and students through the web application.
• BASI OrgThe Basic Achievement Skills Inventory-2 is a series of norm-referenced and formative achievement assessments. The Comprehensive version gives a detailed evaluation of academic skills for grades 3-12.
• Dyslexia ScreenerSchool dyslexia screening platform with multi-role workflows and follow-up monitoring for at-risk learners.