Security

Security and data protection

Higher-education teams handle sensitive student information, so we built ActionConnect with student-data privacy in mind. Here's how we protect your data today — and what we're working toward.

Isolated database per institution

Every institution gets its own dedicated database, storage, and routing. Separation between workspaces is structural, not a permission setting that can be misconfigured.

Single sign-on (SSO)

Connect your identity provider with SSO, and keep staff accounts in sync with Microsoft Entra directory sync, so access follows your existing on/off-boarding process.

Audit log

A full audit log records key actions across your workspace, giving administrators a record of who did what and when.

Privacy-minded by design

We collect only the data needed to run your workspace, avoid unnecessary tracking, and design data handling with student-data privacy in mind.

Built on Cloudflare

ActionConnect runs on Cloudflare's global network for resilient, encrypted-in-transit delivery, with a data-residency-ready architecture.

Module- and campus-scoped access

Granular, module-based roles enforce least privilege — give some staff only the Facilities section, others only the helpdesk — and access is scoped by campus, so people see only the sites they oversee.

Access-aware reporting

Reports and dashboards respect each user's permissions and campus scope, so people see only the data and report types they're allowed to — separation carries through to analytics, not just lists.

Role-based people visibility

Control which roles appear as requesters, assignees, and collaborators on each work type, so staff and student names surface only where they should — fine-grained control over who's visible to whom.

Governed knowledge base

Knowledge-base articles go through review and approval before they publish, so only vetted content reaches the people who rely on it — governance over what your institution puts in writing.

Our compliance posture

ActionConnect is designed with student-data privacy in mind, and we are actively building toward formal compliance milestones. We do not currently hold a SOC 2 certification, and we make no claim of FERPA compliance.

We're happy to talk through our data-protection practices, isolation model, and roadmap with your IT and compliance teams as part of a pilot. Reach out and we'll share what we have and where we're headed.

Reviewing ActionConnect for your institution?

We're happy to walk your IT and compliance teams through our data-protection practices, isolation model, and roadmap.

Talk to our team