Security at IntelliBoard¶

At IntelliBoard, safeguarding your data is our fundamental duty. We don’t just meet security standards - we engineer them into every layer of our platform. From encryption to zero-trust access, our security model is built to protect your institution’s most sensitive learning analytics.

Our systems are aligned with ISO 27001, NIST 800-53, and FedRAMP Moderate controls. We are SOC 2 Type I compliant with TX-RAMP Provisional Certification (TX1758009, valid through March 10, 2027), with Type II attestation in progress, and our controls are under active review by independent auditors.

We are building and operating to the full requirements - because trust starts with accountability.

Our Security Framework¶

We protect your data through a layered, zero-trust architecture. Every component - from data ingestion to user access - is authenticated, encrypted, and continuously monitored.

How We Protect Your Data¶

Encryption & Data Protection¶

We ensure your data remains private at every stage of its lifecycle.

• In Transit: All data transfers use TLS 1.3 with perfect forward secrecy.
• At Rest: Data is encrypted with AES-256 using keys managed in AWS KMS with strict rotation policies.
• Key Security: Access to cryptographic keys is limited to authorized personnel and audited quarterly.
• Data Classification: Sensitive data (e.g., student grades) is identified and receives enhanced protection per our Information Security Policy 🔒.
• Regulatory Alignment: Our practices meet global standards, as outlined in our Privacy Policy.

Access Controls & Identity Management¶

We enforce strict access policies to prevent unauthorized use.

• Role-Based Access Control (RBAC): Users (admins, instructors, advisors) access only the data they need.
• Row-Level Security (RLS): An advisor sees only their students. A dean sees only their school.
• Multi-Factor Authentication (MFA): Required for all administrative accounts.
• Session Security: Inactive sessions time out after 15 minutes.
• Identity Verification: All access requests are logged and audited.

Monitoring, Detection & Incident Response¶

We maintain 24/7 vigilance over our systems.

• Real-Time Surveillance: Our SIEM system detects anomalies (e.g., failed logins, unusual data access) in real time.
• Threat Detection SLA: Suspicious activity is identified and triaged within 15 minutes.
• Incident Response: A dedicated team follows a documented process to contain, investigate, and resolve threats.
• Client Notification: If an incident impacts your data, we notify you within 72 hours via secure channels.
• Audit Logs: All system and user activity is logged immutably for forensic review.

Security at a Glance¶

Your Role in Security¶

Security is a shared responsibility. While we protect the platform, your team can strengthen security by:

• Using strong, unique API credentials
• Enabling SSO and MFA for your LMS
• Reporting suspicious activity to privacy@intelliboard.net

For secure integration guides, visit our Knowledge Base.