Is GPTZero FERPA compliant?

FERPA (the Family Educational Rights and Privacy Act) is a US federal law that governs educational records. It applies directly to educational institutions - not to the vendors they work with. In practice, your school or district is the FERPA-covered entity, and your choice of software tools must support - not undermine - your institution's compliance obligations.

GPTZero is designed to support your institution's FERPA compliance. Here is how:

Non-generative detection only

GPTZero is a detection tool. It analyzes text and returns a confidence score. It does not generate content, does not autonomously access institutional systems, and does not reuse submitted text for any purpose other than producing the detection result you requested.

No secondary use of student data

Text submitted by teachers and institutional customers is not used for model training, product analytics, or any secondary purpose. Student writing is processed solely to run the scan you requested, and nothing more.

No unauthorized data sharing

GPTZero does not share submitted content with third parties for advertising, analytics, or any commercial purpose. Infrastructure sub-processors (such as cloud storage providers) handle data on our behalf under contractual privacy obligations.

Data Deletion

You can delete individual scans at any time from your app.gptzero.me/app/documents.

To remove all of your data, delete your GPTZero account. This will permanently erase your profile and everything associated with it.

SOC 2 Type 2 certified

GPTZero holds SOC 2 Type 2 certification, which is commonly required for institutional software procurement and demonstrates that our security controls have been independently audited and verified over time.

Need documentation for your IT office? If your institution requires a HECVAT, SOC 2 report, security questionnaire, or NDA before approving GPTZero, we can provide these. Contact us at support@gptzero.me.