Back to home
SchoolsUniversitiesStudent data

Education Records Addendum

Student, guardian, admissions, attendance, grading, finance, and education record handling.

Last updated: May 9, 2026

Institution Control

The educational institution controls the purposes, permissions, retention, lawful basis, notices, and disclosures for education records submitted to HevraERP.

Provider processes education records only to provide, secure, support, maintain, and operate the service unless the institution gives other lawful instructions.

School Official Use Cases

  • Provider performs institutional services or functions that the institution would otherwise perform itself or with employees.
  • Provider is subject to the institution direct-control terms through the agreement, DPA, product configuration, and written instructions.
  • Education records are used only for the purposes for which they were disclosed and are not redisclosed except as authorized by the institution, agreement, or law.

Authorized Processing

  • Host student, guardian, admissions, enrollment, attendance, grading, finance, scholarship, document, portal, notification, and workflow records.
  • Authenticate users and enforce institution-configured roles and permissions.
  • Provide support, troubleshooting, migration, backup, monitoring, security, audit logging, reports, exports, and configured workflows.

Requests and Retention

Parents, guardians, students, and eligible students should submit access, amendment, deletion, or rights requests to the institution. Provider may assist according to the DPA, agreement, and available product functionality.

Education Records Addendum — Hevra ERP