ABOUT US

1EdTech is the leading member-led non-profit edtech partnership accelerating the digital transformation of learning

The 1EdTech community is guided by a set of educational leadership strategies essential to improving learning experiences and outcomes in K-12, higher education, and lifelong learning

1EdTech community-led workstreams help create a secure, scalable, and best-in-class digital learning ecosystem to serve the needs of all learners

1EdTech standards support seamless interoperability, lower TCO, and greater choice.

The TrustEd Apps Directory is the official listing of products and applications reviewed, vetted, or certified by 1EdTech

1EdTech hosts the annual Learning Impact Conference and other engagement opportunities throughout the year to advance the leadership and ideas that shape the future of digital learning

TrustEd Apps Profile for Electude LMS

Product: Electude LMS
Vetted by David McNulty, Integrations Manager at Electude International

Privacy Rubric Results

  • N/A
  • UNMET
  • PARTIAL
  • MEETS
Data Collection
Security
3rd Party Data
Advertising
Certified
Rubric Area Expectations
General Meets Partially Meets Doesn't Meet
User Notes GEN1 - How are changes to key policies managed?
ANSWER: Notification is provided to the user in advance and a history of policy revisions are available
User Notes:
https://reseller.electude.eu/terms
Section 4. Reporting: Electude continually updates this information and informs users about changes to the measures taken to protect Personal Data against abuse via the privacy statement.
https://reseller.electude.eu/terms Section 4. Reporting: Electude continually updates this information and informs users about changes to the measures taken to protect Personal Data against abuse via the privacy statement.
Answer Meets Expectations Unselected Option: Unselected Option:
Data Collected Meets Partially Meets Doesn't Meet
User Notes DCQ1 - Do the policies list all data collected?
ANSWER: Policies list the data collected OR policies state no data is collected
User Notes:
https://support.electude.com/privacy
Electude does not store your personal data longer than is strictly necessary to realize the purposes for which your data is collected.

For the performance of a contract we need the data listed below. We keep this information as long as required to deliver our services and perform our contracts. Then we destroy it, unless legal obligations require us to keep it longer.

username and password;
contact details;
date and place of birth
learning results;
educational organization;
invoice and payment information.
https://support.electude.com/privacy Electude does not store your personal data longer than is strictly necessary to realize the purposes for which your data is collected. For the performance of a contract we need the data listed below. We keep this information as long as required to deliver our services and perform our contracts. Then we destroy it, unless legal obligations require us to keep it longer. username and password; contact details; date and place of birth learning results; educational organization; invoice and payment information.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes DCQ2 - Do the policies indicate how data is collected?
ANSWER: Policies state specifically how data is collected OR policies state no data collected
User Notes:
https://support.electude.com/privacy
Electude does not store your personal data longer than is strictly necessary to realize the purposes for which your data is collected.

For the performance of a contract we need the data listed below. We keep this information as long as required to deliver our services and perform our contracts. Then we destroy it, unless legal obligations require us to keep it longer.

username and password;
contact details;
date and place of birth
learning results;
educational organization;
invoice and payment information.
https://support.electude.com/privacy Electude does not store your personal data longer than is strictly necessary to realize the purposes for which your data is collected. For the performance of a contract we need the data listed below. We keep this information as long as required to deliver our services and perform our contracts. Then we destroy it, unless legal obligations require us to keep it longer. username and password; contact details; date and place of birth learning results; educational organization; invoice and payment information.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes DCQ3 - Do the policies state who owns the data?
ANSWER: Policies state the user owns the data alone OR policies state no data collected
User Notes:
https://support.electude.com/privacy
Access, rectify or erase data
You have the right to access, rectify or erase your personal data. Besides you also have the right to withdraw your permission for processing your data, to object against the processing of your personal data by our organization and to apply for data portability. This means you can request us to send your personal data (that we have in our possession) through a computer file to you or somebody else, or to an organization of your choice.

https://www.electude.com/privacy
Processing of personal data

The data controller stipulates how the data is handled and therefore the ownership of data is between the controller and the user.
https://support.electude.com/privacy Access, rectify or erase data You have the right to access, rectify or erase your personal data. Besides you also have the right to withdraw your permission for processing your data, to object against the processing of your personal data by our organization and to apply for data portability. This means you can request us to send your personal data (that we have in our possession) through a computer file to you or somebody else, or to an organization of your choice. https://www.electude.com/privacy Processing of personal data The data controller stipulates how the data is handled and therefore the ownership of data is between the controller and the user.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes DCQ4 - Do the policies allow users to delete their data entirely?
ANSWER: Policies allow users to delete data entirely after a period of time OR policies state no data collected
User Notes:
https://support.electude.com/privacy
Access, rectify, or erase data
You have the right to access, rectify or erase your personal data. Besides you also have the right to withdraw your permission for processing your data, to object against the processing of your personal data by our organization, and to apply for data portability. This means you can request us to send your personal data (that we have in our possession) through a computer file to you or somebody else, or to an organization of your choice.

https://www.electude.com/privacy
Processing of personal data
https://support.electude.com/privacy Access, rectify, or erase data You have the right to access, rectify or erase your personal data. Besides you also have the right to withdraw your permission for processing your data, to object against the processing of your personal data by our organization, and to apply for data portability. This means you can request us to send your personal data (that we have in our possession) through a computer file to you or somebody else, or to an organization of your choice. https://www.electude.com/privacy Processing of personal data
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes DCQ5 - Do the policies state the retention of data?
ANSWER: Policies have a 60-day or less retention policy OR policies state no data collected
User Notes:
https://support.electude.com/terms#annex1

Retention of Personal Data
Personal data are stored until an authorized teacher or the Controller deletes the data from the service. Student responses to the e-learning are automatically deleted after 1 year. All personal data are deleted after the end of the provision of service. After deletion of any personal data, back ups are maintained for up to 2 months.

Log files are automatically deleted after 1 year.
https://support.electude.com/terms#annex1 Retention of Personal Data Personal data are stored until an authorized teacher or the Controller deletes the data from the service. Student responses to the e-learning are automatically deleted after 1 year. All personal data are deleted after the end of the provision of service. After deletion of any personal data, back ups are maintained for up to 2 months. Log files are automatically deleted after 1 year.
Answer Meets Expectations Unselected Option: Unselected Option:
Security Meets Partially Meets Doesn't Meet
User Notes SECQ1 - Do the policies state how data is protected?
ANSWER: Policies list the steps taken to protect data or OR policies state no data collected
User Notes:
https://support.electude.com/privacy

Physical security and continuity of resources
Personal data are only processed in a closed, physically secure environment with protection against threats from outside.
Personal data are only processed on equipment where measures have been taken to physically secure the equipment and ensure continuity of service.
A backup is periodically made for the benefit of the continuity of service. This backup is be treated confidentially and kept in a closed environment.
The locations where data are processed are periodically tested, maintained and periodically assessed for safety risks.
Electude has business continuity plans in which redundant locations are included.
Personal data are only stored in a ISO27001 and/or PCI DSS certified environment.
Network, server and application security and maintenance
The systems in which Personal Data are processed are protected by proxies and firewalls. Measures against abuse and attacks have been implemented.
The systems in which Personal Data are processed are monitored.
The service within which Personal Data is processed is based on system planning, security control and acceptance. Changes in applications are tested for vulnerabilities before they are taken into production.
Appropriate security patches will be applied to systems in a timely manner.
Personal data processed within applications are classified according to risks.
Penetration tests and vulnerability assessments are performed periodically.
Information that is no longer used will be deleted.
Passwords are only stored in encrypted form.
Data are only be transmitted in encrypted form.
Emails are sent using SPF, DKIM and DMARC to prevent sender fraud.
https://support.electude.com/privacy Physical security and continuity of resources Personal data are only processed in a closed, physically secure environment with protection against threats from outside. Personal data are only processed on equipment where measures have been taken to physically secure the equipment and ensure continuity of service. A backup is periodically made for the benefit of the continuity of service. This backup is be treated confidentially and kept in a closed environment. The locations where data are processed are periodically tested, maintained and periodically assessed for safety risks. Electude has business continuity plans in which redundant locations are included. Personal data are only stored in a ISO27001 and/or PCI DSS certified environment. Network, server and application security and maintenance The systems in which Personal Data are processed are protected by proxies and firewalls. Measures against abuse and attacks have been implemented. The systems in which Personal Data are processed are monitored. The service within which Personal Data is processed is based on system planning, security control and acceptance. Changes in applications are tested for vulnerabilities before they are taken into production. Appropriate security patches will be applied to systems in a timely manner. Personal data processed within applications are classified according to risks. Penetration tests and vulnerability assessments are performed periodically. Information that is no longer used will be deleted. Passwords are only stored in encrypted form. Data are only be transmitted in encrypted form. Emails are sent using SPF, DKIM and DMARC to prevent sender fraud.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SECQ2 - Do the policies state all confidential & sensitive information is encrypted throughout?
ANSWER: Data encrypted throughout OR passes an encryption test with no vulnerabilities OR policies state no data collected
User Notes:
https://support.electude.com/privacy

Physical security and continuity of resources
Personal data are only processed in a closed, physically secure environment with protection against threats from outside.
Personal data are only processed on equipment where measures have been taken to physically secure the equipment and ensure continuity of service.
A backup is periodically made for the benefit of the continuity of service. This backup is be treated confidentially and kept in a closed environment.
The locations where data are processed are periodically tested, maintained and periodically assessed for safety risks.
Electude has business continuity plans in which redundant locations are included.
Personal data are only stored in a ISO27001 and/or PCI DSS certified environment.
Network, server and application security and maintenance
The systems in which Personal Data are processed are protected by proxies and firewalls. Measures against abuse and attacks have been implemented.
The systems in which Personal Data are processed are monitored.
The service within which Personal Data is processed is based on system planning, security control and acceptance. Changes in applications are tested for vulnerabilities before they are taken into production.
Appropriate security patches will be applied to systems in a timely manner.
Personal data processed within applications are classified according to risks.
Penetration tests and vulnerability assessments are performed periodically.
Information that is no longer used will be deleted.
Passwords are only stored in encrypted form.
Data are only be transmitted in encrypted form.
Emails are sent using SPF, DKIM and DMARC to prevent sender fraud.
https://support.electude.com/privacy Physical security and continuity of resources Personal data are only processed in a closed, physically secure environment with protection against threats from outside. Personal data are only processed on equipment where measures have been taken to physically secure the equipment and ensure continuity of service. A backup is periodically made for the benefit of the continuity of service. This backup is be treated confidentially and kept in a closed environment. The locations where data are processed are periodically tested, maintained and periodically assessed for safety risks. Electude has business continuity plans in which redundant locations are included. Personal data are only stored in a ISO27001 and/or PCI DSS certified environment. Network, server and application security and maintenance The systems in which Personal Data are processed are protected by proxies and firewalls. Measures against abuse and attacks have been implemented. The systems in which Personal Data are processed are monitored. The service within which Personal Data is processed is based on system planning, security control and acceptance. Changes in applications are tested for vulnerabilities before they are taken into production. Appropriate security patches will be applied to systems in a timely manner. Personal data processed within applications are classified according to risks. Penetration tests and vulnerability assessments are performed periodically. Information that is no longer used will be deleted. Passwords are only stored in encrypted form. Data are only be transmitted in encrypted form. Emails are sent using SPF, DKIM and DMARC to prevent sender fraud.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SECQ3 - Do the policies state whether or not it enforces strong password creation?
ANSWER: Supplier enforces strong password creation OR supplier user base exempt from password requirements or OR no account creation required
User Notes:
LTI launch automatically creates an account and no password is issued to the user.
for users using direct login password strength is set by schools policy:

For all accounts, you can set a minimum password strength. This setting does not cover temporary passwords, for this a fixed minimum of 8 characters is required.

https://www.electude.com/administrator-support/
LTI launch automatically creates an account and no password is issued to the user. for users using direct login password strength is set by schools policy: For all accounts, you can set a minimum password strength. This setting does not cover temporary passwords, for this a fixed minimum of 8 characters is required. https://www.electude.com/administrator-support/
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SECQ4 - Do the policies indicate whether or not it leverages 2 step (or other forms of multifactor) authentication?
ANSWER: Supplier uses SSO or an LTI launch OR no account creation is required OR supplier user base exempt from 2-step authentication requirements
User Notes:
LTI launch automatically creates an account and no password is issued to the user.
for users using direct login password strength is set by schools policy:

For all accounts, you can set a minimum password strength. This setting does not cover temporary passwords, for this a fixed minimum of 8 characters is required.

https://www.electude.com/administrator-support/
LTI launch automatically creates an account and no password is issued to the user. for users using direct login password strength is set by schools policy: For all accounts, you can set a minimum password strength. This setting does not cover temporary passwords, for this a fixed minimum of 8 characters is required. https://www.electude.com/administrator-support/
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SECQ5 - Do the policies state the use of cookies?
ANSWER: Policies list all cookies used and each cookie's purpose OR policies state that it only uses cookies that are crucial for app functionality
User Notes:
https://support.electude.com/privacy
Cookies
Electude uses only technical and functional cookies. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and remember, for example, your preferences. We can also optimize our website with this. You can opt-out of cookies by setting your internet browser so that it does not store cookies anymore. In addition, you can also delete all information previously saved via the settings of your browser.
https://support.electude.com/privacy Cookies Electude uses only technical and functional cookies. A cookie is a small text file that is stored on your computer, tablet or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your ease of use. They ensure that the website works properly and remember, for example, your preferences. We can also optimize our website with this. You can opt-out of cookies by setting your internet browser so that it does not store cookies anymore. In addition, you can also delete all information previously saved via the settings of your browser.
Answer Meets Expectations Unselected Option: Unselected Option:
Third Party Data Meets Partially Meets Doesn't Meet
User Notes SHRQ1 - Do the policies state the use of third parties?
ANSWER: Policies list each third party separately OR policies state third party use strictly for app functionality OR policies state that they do not use third parties
User Notes:
https://support.electude.com/privacy
Sharing personal data with third parties
Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.

Currently, we use these processors for this web site:

Sub processors are listed on the Electude LMS site of each Customer only.
https://support.electude.com/privacy Sharing personal data with third parties Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission. Currently, we use these processors for this web site: Sub processors are listed on the Electude LMS site of each Customer only.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SHRQ2 - Do the policies state what information is shared with each 3rd party?
ANSWER: Policies list the data it shares with each third party separately OR policies state that it does not share any data with any third party
User Notes:
Sharing personal data with third parties
Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.
Sharing personal data with third parties Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SHRQ3 - Do the policies state whether or not users can opt out of 3rd party data sharing?
ANSWER: Policies include an easy opt out process for users OR policies state that it does not share any data with any third party
User Notes:
Sharing personal data with third parties
Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.
Sharing personal data with third parties Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SHRQ4 - Do the policies state if the supplier requires 3rd parties to adhere to the terms of the vendor/customer agreement?
ANSWER: Supplier claims responsibility for third party privacy practices OR policies state that it does not share any data with any third party
User Notes:
Sharing personal data with third parties
Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data.
Sharing personal data with third parties Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes SHRQ5 - Do the policies state whether or not user is notified of a change in third parties?
ANSWER: Supplier changes third party and keeps the same data sharing terms OR supplier does not use any third parties
User Notes:
Sharing personal data with third parties
Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.
Sharing personal data with third parties Electude shares your personal data with third parties only if this is necessary for the execution of our agreement with you or to comply with a legal obligation. With companies that process your data in our assignment, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. Electude remains responsible for these processing operations. Electude also provides your personal data to other third parties. We only do this with your express permission.
Answer Meets Expectations Unselected Option: Unselected Option:
Advertising Meets Partially Meets Doesn't Meet
User Notes ADVQ1 - Do the policies indicate if advertisements are displayed?
ANSWER: No ads are displayed
User Notes:
There are no advertisements displayed on the Electude platform.
There are no advertisements displayed on the Electude platform.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes ADVQ2 - Do the policies indicate whether or not users are targeted for advertisement?
ANSWER: Policies guarantee no ad targeting OR Policies state no ads are used on its platform
User Notes:
There are no advertisements displayed on the Electude platform.
There are no advertisements displayed on the Electude platform.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes ADVQ3 - Do the policies indicate whether or not any 3rd parties track or collect information for advertisement?
ANSWER: Policies state third parties are not used for ads or tracking
User Notes:
There are no advertisements displayed on the Electude platform.
There are no advertisements displayed on the Electude platform.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes ADVQ4 - Do the policies indicate whether or not web beacons or other tracking methods are used for ad purposes?
ANSWER: Policies state that it only tracks interactions within its application OR policies state that it does not use any tracking technologies for ads
User Notes:
There are no advertisements displayed on the Electude platform.
There are no advertisements displayed on the Electude platform.
Answer Meets Expectations Unselected Option: Unselected Option:
User Notes ADVQ5 - Do the policies state whether or not users can opt out of sharing data with advertisers?
ANSWER: Policies state in detail how users can opt out of sharing data with advertisers OR policies state no ads are used on its platform
User Notes:
There are no advertisements displayed on the Electude platform.
There are no advertisements displayed on the Electude platform.
Answer Meets Expectations Unselected Option: Unselected Option:

Vetting Context

Policies Cited

The following urls were cited as a basis for this information.

Geographical Context

(Laws and regulations can vary across regions)
Massachusetts
United States United States flag

Regulatory Compliance

The information below provides insight into compliance with various regulatory policies.

  • GDPR Compliant: Yes
  • FERPA Compliant: Yes
  • COPPA Compliant: Yes
US State Regulatory Compliance:
  • Arkansas HB 1961
  • California AB 1584
  • California SB 1177
  • California AB 2799
  • California AB 2828
  • Connecticut HB 5469
  • Delaware SB 79
  • Delaware SB 208
  • Georgia SB 89
  • Hawaii SB 2607
  • Illinois SB 1796
  • Iowa HF 2354
  • Kansas HB 2008 (S sub)
  • Kentucky HB 232
  • Louisiana HB 718
  • Maine SP 183
  • Maine LD1616
  • Maryland HB 298
  • Michigan SB 510
  • Missouri HB 1490

This application CAN NOT be used by children under the age of 13.

Email David about this record

The views and opinions expressed in this information are those of the authors and do not necessarily reflect the official policy or position of 1EdTech. The information provided is intended to surface trends about the policies and procedures of systems leveraged by the educational community. It should not be considered legal advice.

Disclaimer: 1EdTech Trusted Apps provides a vetting of a product's data policy according to the 1EdTech Trusted Apps Rubric. Achieving the TrustEd Apps Certified Seal indicates adherence to a baseline level of privacy. Institutions should review an application's detailed vetting results before approving it for use.

© Copyright 2026 1EdTech Global Learning Consortium Inc. All Rights Reserved.

App Vetting Rubric Version: 2