Security & Compliance
We collect as little as the work requires, protect what we hold, and keep customer data under customer control. Education technology contexts receive additional care because student information is involved.
Practices
Personal information is collected for a stated purpose, used only for that purpose, and protected commensurate with its sensitivity.
Systems are designed to collect the least information necessary. Fields that are not required are not requested.
Information is retained only as long as needed for the stated purpose or as required by contract or law, then disposed of securely.
Personal information is encrypted in transit and at rest, with access limited to those who need it for delivery.
Customer and agency data belongs to the customer. It is not sold, and it is not used for unrelated purposes.
Requests to access personal information are handled through the secure contact workflow with identity verification appropriate to the request.
Deletion requests are honored where no overriding contractual, legal, or records-retention obligation applies.
Related
Read the Privacy Policy for details on website data collection, use, and retention.
IEP ALLY APP LLC does not hold FedRAMP authorization, SOC 2 attestation, ISO 27001 certification, or CMMC certification. Framework references describe familiarity and practice alignment only. They do not represent certification, authorization, endorsement, audit, or verified compliance status.
Contracting officers, prime contractors, integrators, and auditors can request review materials through our secure documentation workflow.