Security & access
Every college’s records stay separate. Every user sees only what their role allows.
Staff, instructors, and students each get a view scoped to their role—instructors see only the classes they teach. Student records stay out of search indexes, analytics, logs, and email subject lines.
Controls
Institution isolation
Every request, query, and database row is scoped to one college. If the college can’t be identified, access is denied.
Role-based access
Five built-in roles plus custom roles, with permissions resolved inside each institution.
Assignment-scoped instructors
Instructors see only the classes they teach and a minimum-data roster.
Education-record boundaries
Student data stays out of search indexes, product analytics, logs, and email subject lines.
Private certificates
Certificates are stored privately and downloaded through signed links. Public checks never show grades or price.
Payments through Stripe
Card details are collected by Stripe and never touch Encore. Funds settle in your college’s own account.
Durable, idempotent work
Payments, notices, completions, and certificates run as retryable background jobs, with idempotency keys on every payment so a retry doesn’t create a second charge.
An audit trail
Key decisions and changes are recorded with who made them and when.
Standards
What your review will ask. Answered up front.
The frameworks public colleges use to evaluate campus software, and the safeguards Encore builds around each. Institution-specific terms are settled in your agreement.
- FERPA
- Designed around FERPA’s limits on education records. Learner data stays out of search indexes, analytics, logs, and email subject lines.
- ADA Title II · WCAG 2.1 AA
- Built and tested toward the accessibility standard the ADA Title II rule sets for public colleges—for learners, instructors, and staff.
- PCI DSS
- Card details go straight to the payment processor and never reach Encore’s servers or database. Funds settle in your college’s own account.
- Encryption
- HTTPS on every connection. Files and the database are encrypted at rest with AES-256, and private files open only through short-lived signed links.
- Least-privilege access
- Access is scoped to one institution and resolved by role. Instructors see only the classes they teach.
- Audit trail
- Key decisions and policy changes record who made them and when.
- Security review
- Architecture and data-flow documentation, plus a current subprocessor list, for your institution’s review.
Accessibility
Built and tested toward WCAG 2.1 AA.
Accessibility is part of how every surface is designed and released—for learners, instructors, and staff.
- Semantic landmarks and a skip link on every page
- Visible focus on every interactive control
- Layouts that reflow without horizontal scrolling
- Motion that respects reduced-motion settings
- Automated accessibility checks before release