TondroAI Extract — Security & compliance
Security, Compliance, and AI Governance — Built In, Not Bolted On
FERPA compliance, audit trails, role-based access, encryption, and transparent AI governance. From architecture up — not afterthought down.
Standards
What compliance and security standards does TondroAI Extract meet?
FERPA-compliant by design, HECVAT-ready with AI-specific documentation, full audit trails, and role-based access inside Salesforce.
- FERPA Compliant
- Built into architecture — not an add-on or configuration option.
- HECVAT Ready
- Full HECVAT 4 documentation including AI-specific questions. Available on request.
- Encrypted
- Data in transit and at rest — in both Salesforce and Google Cloud Platform.
- Role-Based Access
- Standard Salesforce permission sets. No separate access management system.
Where data lives
Where does TondroAI Extract store student data?
Student data lives in your Salesforce org. AI processing runs on Google Cloud Platform. No data stored outside these two environments.
- Salesforce (Your Org)Encrypted
- Student records, extracted data, equivalency mappings, audit logs
- Google Cloud Platform
- Document processing and AI extraction. Results returned to Salesforce.
No third-party data warehouses. No shadow databases. No vendor-controlled student data storage.
Audit trail
What does TondroAI Extract log in its audit trail?
Every action — every extraction, mapping, faculty review, override, and export — logged in a queryable trail inside Salesforce.
- AI extraction events with confidence scores
- Evaluator validation actions (what changed, by whom, when)
- Equivalency mapping creation and modification
- Faculty review assignments, decisions, and response times
- Manual overrides with justification
- Data exports and SIS transfers
- Verification results
Satisfies accreditor requirements for demonstrating consistent, documented evaluation processes.
AI governance
How does TondroAI Extract govern its AI?
AI performs data extraction only. Every equivalency, credit, grade threshold, and student outcome decision stays in human hands.
- Equivalency mapping decisions
- AI does: Reads documents and extracts structured data
- Credit acceptance and grade thresholds
- AI does: Assigns confidence scores to every extracted value
- Faculty curriculum judgments
- AI does: Flags low-confidence items for human review
- Override authority on any AI output
- AI does: Logs every action in the audit trail
HECVAT
Is TondroAI Extract HECVAT ready?
Yes — full HECVAT 4 documentation including AI-specific questions now required for institutional vendor assessment processes. HECVAT documentation covers data handling, encryption, access controls, incident response, and AI governance. Because TondroAI Extract’s AI performs extraction only (not academic decisions), the AI governance section is straightforward.
$2.50 per transcript.
FERPA-compliant. HECVAT-ready. Full audit trails. No security surprises.
Common questions
Frequently Asked Questions
Is TondroAI Extract FERPA compliant?
Yes. FERPA compliance is built into TondroAI Extract’s architecture. Every action on student data is logged in a complete audit trail. Role-based access controls use standard Salesforce permission sets. Data transmission between Salesforce and Google Cloud Platform is encrypted, and data at rest is encrypted in both environments. TondroAI Extract processes transcripts at $2.50 each with FERPA compliance as a baseline — not an add-on.
Where does TondroAI Extract store student data?
In your Salesforce org and Google Cloud Platform — no data stored outside these two environments. Student records, extracted data, equivalency mappings, and audit logs reside in your Salesforce org under your existing security controls. Documents submitted for AI processing are transmitted to GCP, and structured results return to Salesforce. No third-party data warehouses, no shadow databases. TondroAI Extract costs $2.50 per transcript with no hidden infrastructure.
Does TondroAI Extract provide HECVAT documentation?
Yes — full HECVAT 4 documentation including AI-specific questions now required by the standard. Documentation covers data handling, encryption, access controls, incident response, and AI governance. Because TondroAI Extract’s AI performs data extraction only at $2.50 per transcript (not academic decision-making), the AI governance section is straightforward. Available on request.
Does the AI in TondroAI Extract make academic decisions?
No. TondroAI Extract’s AI reads documents and extracts structured data — course names, grades, credits, GPAs, and configured data fields. It does not decide equivalencies, grade thresholds, credit acceptance, or student outcomes. All academic judgment remains with evaluators, faculty, and institution-configured rules. TondroAI Extract processes at $2.50 per transcript with AI extraction and human authority by design.
Does TondroAI Extract log all actions in an audit trail?
Yes. Every extraction, validation, mapping, faculty review, override, and export is logged in a queryable audit trail inside Salesforce. This satisfies accreditor requirements for demonstrating consistent evaluation processes. TondroAI Extract’s complete audit trail is included at $2.50 per transcript — no separate audit module or premium tier.
Start here
Ready for Your Security Review
Request HECVAT documentation or schedule a security-focused demo with your IT team.