App Vetting Profile for Facilities Work Orders

Product: Facilities Work Orders

Vetted by Data Privacy, Data Privacy Team at 1EdTech

App Vetting Capability: Expert (Self Rated)

Privacy Rubric Results

This product has met the criteria required to achieve the 1EdTech Data Privacy Seal.

N/A
UNMET
PARTIAL
MEETS

Data Collection

Security

3rd Party Data

Advertising

Certified

Rubric Area	Expectations
General	Meets	Partially Meets	Doesn't Meet
User Notes User Notes GEN1 - How are changes to key policies managed? ANSWER: Notification is provided to the user in advance and a history of policy revisions are available User Notes: This Privacy Statement may be revised from time to time. If we intend to use or disclose personal information for purposes materially different than those described in this statement, we will make reasonable efforts to notify affected individuals, if necessary, including by revising this Privacy Statement. If you are concerned about how your personal information is used, you should check our website periodically or contact us as described above to obtain a current copy of this statement. We urge you to request and review this Privacy Statement frequently to obtain the current version. Your continued provision of personal information, purchase of products or use of our services following any changes to this Privacy Statement constitutes your acceptance of any such changes. This Privacy Statement may be revised from time to time. If we intend to use or disclose personal information for purposes materially different than those described in this statement, we will make reasonable efforts to notify affected individuals, if necessary, including by revising this Privacy Statement. If you are concerned about how your personal information is used, you should check our website periodically or contact us as described above to obtain a current copy of this statement. We urge you to request and review this Privacy Statement frequently to obtain the current version. Your continued provision of personal information, purchase of products or use of our services following any changes to this Privacy Statement constitutes your acceptance of any such changes.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Data Collected	Meets	Partially Meets	Doesn't Meet
User Notes User Notes DCQ1 - Do the policies list all data collected? ANSWER: Policies list the data collected OR policies state no data is collected User Notes: You may provide Follett School Solutions with "Personal Information" (which is information that can be used to contact or specifically identify an individual, such as your full name, mailing address, mobile number, and email address), account information (such as a password or other information that helps us confirm that it is you accessing your account) and demographic or other information (such as your gender, age or birthdate, zip code and information about your interests and preferences). We will also collect payment information (typically, credit card account information) if you choose to purchase products or services through the Services. And, when you make a purchase or otherwise transact with Follett School Solutions, whether online or offline, we will retain information regarding those purchases and transactions, such as products purchased, location of purchase, and how frequently you buy. Any information combined with Personal Information will be treated as Personal Information. You may provide Follett School Solutions with "Personal Information" (which is information that can be used to contact or specifically identify an individual, such as your full name, mailing address, mobile number, and email address), account information (such as a password or other information that helps us confirm that it is you accessing your account) and demographic or other information (such as your gender, age or birthdate, zip code and information about your interests and preferences). We will also collect payment information (typically, credit card account information) if you choose to purchase products or services through the Services. And, when you make a purchase or otherwise transact with Follett School Solutions, whether online or offline, we will retain information regarding those purchases and transactions, such as products purchased, location of purchase, and how frequently you buy. Any information combined with Personal Information will be treated as Personal Information.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ2 - Do the policies indicate how data is collected? ANSWER: Policies state specifically how data is collected OR policies state no data collected User Notes: You may provide Follett School Solutions with "Personal Information" (which is information that can be used to contact or specifically identify an individual, such as your full name, mailing address, mobile number, and email address), account information (such as a password or other information that helps us confirm that it is you accessing your account) and demographic or other information (such as your gender, age or birthdate, zip code and information about your interests and preferences). We will also collect payment information (typically, credit card account information) if you choose to purchase products or services through the Services. And, when you make a purchase or otherwise transact with Follett School Solutions, whether online or offline, we will retain information regarding those purchases and transactions, such as products purchased, location of purchase, and how frequently you buy. Any information combined with Personal Information will be treated as Personal Information. You may provide Follett School Solutions with "Personal Information" (which is information that can be used to contact or specifically identify an individual, such as your full name, mailing address, mobile number, and email address), account information (such as a password or other information that helps us confirm that it is you accessing your account) and demographic or other information (such as your gender, age or birthdate, zip code and information about your interests and preferences). We will also collect payment information (typically, credit card account information) if you choose to purchase products or services through the Services. And, when you make a purchase or otherwise transact with Follett School Solutions, whether online or offline, we will retain information regarding those purchases and transactions, such as products purchased, location of purchase, and how frequently you buy. Any information combined with Personal Information will be treated as Personal Information.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ3 - Do the policies state who owns the data? ANSWER: Policies state the user owns the data alone OR policies state no data collected User Notes: Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. For public marketing websites web users own their own data based on jurisdiction. Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. For public marketing websites web users own their own data based on jurisdiction.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ4 - Do the policies allow users to delete their data entirely? ANSWER: Policies allow users to delete data entirely after a period of time OR policies state no data collected User Notes: Depending on your location, you may have different rights to request a copy, deletion, or update of the personal information that we hold about you based on jurisdiction. We only retain your personal information for legitimate purposes to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes. If required by law we will grant your request for a copy, data deletion or update of information. Please address written requests and questions about your rights to privacy@follettlearning.com, call us at 800-350-6418 or 708-884-0230. Based on your jurisdiction you may submit a request for a copy, deletion or update of the personal information that we hold about you through our privacy@follettlearning.com email or write to us at Follett School Solutions, LLC, Attn: Privacy, 1340 Ridgeview Dr., McHenry, IL 60050. Questions or comments submitted through other means, such as Wall posts, may not be received or addressed. Depending on your location, you may have different rights to request a copy, deletion, or update of the personal information that we hold about you based on jurisdiction. We only retain your personal information for legitimate purposes to comply with our legal obligations, resolve disputes, enforce our agreements, or for another one of our business purposes. If required by law we will grant your request for a copy, data deletion or update of information. Please address written requests and questions about your rights to privacy@follettlearning.com, call us at 800-350-6418 or 708-884-0230. Based on your jurisdiction you may submit a request for a copy, deletion or update of the personal information that we hold about you through our privacy@follettlearning.com email or write to us at Follett School Solutions, LLC, Attn: Privacy, 1340 Ridgeview Dr., McHenry, IL 60050. Questions or comments submitted through other means, such as Wall posts, may not be received or addressed.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ5 - Do the policies state the retention of data? ANSWER: Policies have a 60-day or less retention policy OR policies state no data collected User Notes: Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. The agreements per product provide retention until contract end. For public marketing websites web users can request data deletion based on jurisdiction by submitting a request to privacy@follettsoftware.com or calling in to our publicly provided phone numbers. Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. The agreements per product provide retention until contract end. For public marketing websites web users can request data deletion based on jurisdiction by submitting a request to privacy@follettsoftware.com or calling in to our publicly provided phone numbers.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Security	Meets	Partially Meets	Doesn't Meet
User Notes User Notes SECQ1 - Do the policies state how data is protected? ANSWER: Policies list the steps taken to protect data or OR policies state no data collected User Notes: Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. For public marketing websites https provides for data in transit and all data is encrypted at rest on our servers. Reference: https://follettsoftware.com/data-security/ Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. For public marketing websites https provides for data in transit and all data is encrypted at rest on our servers. Reference: https://follettsoftware.com/data-security/	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ2 - Do the policies state all confidential & sensitive information is encrypted throughout? ANSWER: Data encrypted throughout OR passes an encryption test with no vulnerabilities OR policies state no data collected User Notes: All our data is encrypted at rest and in transit, third-party verified for SOC 2 and NIST 800-53 framework, 416 controls for security and privacy overlay. Reference: https://follettsoftware.com/data-security/ All our data is encrypted at rest and in transit, third-party verified for SOC 2 and NIST 800-53 framework, 416 controls for security and privacy overlay. Reference: https://follettsoftware.com/data-security/	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ3 - Do the policies state whether or not it enforces strong password creation? ANSWER: Supplier enforces strong password creation OR supplier user base exempt from password requirements or OR no account creation required User Notes: no account creation required no account creation required	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ4 - Do the policies indicate whether or not it leverages 2 step (or other forms of multifactor) authentication? ANSWER: Supplier uses SSO or an LTI launch OR no account creation is required OR supplier user base exempt from 2-step authentication requirements User Notes: no account creation required no account creation required	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ5 - Do the policies state the use of cookies? ANSWER: Policies list all cookies used and each cookie's purpose OR policies state that it only uses cookies that are crucial for app functionality User Notes: Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. In the private portals only session based cookies are utilized for usability information, no profiling nor sale of data. Public website cookie information: https://follettsoftware.com/cookie-policy/. Our marketing sites have agreements with all our vendors and that data is controlled by Follett Software. No data is sold to any third party. Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, and the customer is the data controller. In the private portals only session based cookies are utilized for usability information, no profiling nor sale of data. Public website cookie information: https://follettsoftware.com/cookie-policy/. Our marketing sites have agreements with all our vendors and that data is controlled by Follett Software. No data is sold to any third party.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Third Party Data	Meets	Partially Meets	Doesn't Meet
User Notes User Notes SHRQ1 - Do the policies state the use of third parties? ANSWER: Policies list each third party separately OR policies state third party use strictly for app functionality OR policies state that they do not use third parties User Notes: Stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, provide any vendor services being utilized, data collected, under our contractual control and the customer is the data controller for all their data which is specified in the agreements. Stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our data collection, provide any vendor services being utilized, data collected, under our contractual control and the customer is the data controller for all their data which is specified in the agreements.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ2 - Do the policies state what information is shared with each 3rd party? ANSWER: Policies list the data it shares with each third party separately OR policies state that it does not share any data with any third party User Notes: Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our third party data collection, provide any vendor services being utilized within our customer agreements as required. The customer is the controller for all their data which is specified in the agreements.Non-Personal Information. We may share non-Personal Information, such as aggregate user statistics, demographic information and Usage Information with third parties, including advertisers, content providers, and analytics providers, and third parties may collect non-Personal Information when you download or use the Services. Service Providers. We may use third parties to perform certain services on our behalf, such as fulfilling and processing orders, tracking analytics, or performing other administrative services. We may provide these companies with access to user information, including Personal Information, to carry out the services they are performing. Generally stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. We also have agreements for all our third party data collection, provide any vendor services being utilized within our customer agreements as required. The customer is the controller for all their data which is specified in the agreements.Non-Personal Information. We may share non-Personal Information, such as aggregate user statistics, demographic information and Usage Information with third parties, including advertisers, content providers, and analytics providers, and third parties may collect non-Personal Information when you download or use the Services. Service Providers. We may use third parties to perform certain services on our behalf, such as fulfilling and processing orders, tracking analytics, or performing other administrative services. We may provide these companies with access to user information, including Personal Information, to carry out the services they are performing.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ3 - Do the policies state whether or not users can opt out of 3rd party data sharing? ANSWER: Policies include an easy opt out process for users OR policies state that it does not share any data with any third party User Notes: Stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. Customers, data controllers, are responsible for their data use. They work with their users for opt out. Our cookie management platform is configured per regulations and provides the ability for users to opt-out based on jurisdiction. No marketing data is sold. Stated in our privacy policy, https://follettsoftware.com/privacy-policy. Our products are private portals for all services. Customers, data controllers, are responsible for their data use. They work with their users for opt out. Our cookie management platform is configured per regulations and provides the ability for users to opt-out based on jurisdiction. No marketing data is sold.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ4 - Do the policies state if the supplier requires 3rd parties to adhere to the terms of the vendor/customer agreement? ANSWER: Supplier claims responsibility for third party privacy practices OR policies state that it does not share any data with any third party User Notes: We review third-party contracts to ensure alignment with our privacy and security requirements. We review third-party contracts to ensure alignment with our privacy and security requirements.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ5 - Do the policies state whether or not user is notified of a change in third parties? ANSWER: Supplier changes third party and keeps the same data sharing terms OR supplier does not use any third parties User Notes: Customers are updated on changes to third parties through agreements updates. Customers are updated on changes to third parties through agreements updates.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Advertising	Meets	Partially Meets	Doesn't Meet
User Notes User Notes ADVQ1 - Do the policies indicate if advertisements are displayed? ANSWER: No ads are displayed User Notes: No ads are displayed No ads are displayed	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ2 - Do the policies indicate whether or not users are targeted for advertisement? ANSWER: Policies guarantee no ad targeting OR Policies state no ads are used on its platform User Notes: No ads are displayed No ads are displayed	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ3 - Do the policies indicate whether or not any 3rd parties track or collect information for advertisement? ANSWER: Policies state third parties are not used for ads or tracking User Notes: No ads are displayed No ads are displayed	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ4 - Do the policies indicate whether or not web beacons or other tracking methods are used for ad purposes? ANSWER: Policies state that it only tracks interactions within its application OR policies state that it does not use any tracking technologies for ads User Notes: No ads are displayed No ads are displayed	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ5 - Do the policies state whether or not users can opt out of sharing data with advertisers? ANSWER: Policies state in detail how users can opt out of sharing data with advertisers OR policies state no ads are used on its platform User Notes: No ads are displayed No ads are displayed	Answer Meets Expectations	Unselected Option:	Unselected Option:

Vetting Context

Policies Cited

The following urls were cited as a basis for this information.

The person providing this information is NOT using the product.
The supplier was NOT consulted about this evaluation.

Geographical Context

(Laws and regulations can vary across regions)

Illinois

United States

Regulatory Compliance

The information below provides insight into compliance with various regulatory policies.

GDPR Compliant: Yes
FERPA Compliant: Yes
COPPA Compliant: Yes

This application can be used by children under the age of 13.

Email Data about this record

The views and opinions expressed in this information are those of the authors and do not necessarily reflect the official policy or position of 1EdTech. The information provided is intended to surface trends about the policies and procedures of systems leveraged by the educational community. It should not be considered legal advice.

Disclaimer: 1EdTech Trusted Apps provides a vetting of a product's data policy according to the 1EdTech Trusted Apps Rubric. Achieving the TrustEd Apps Certified Seal indicates adherence to a baseline level of privacy. Institutions should review an application's detailed vetting results before approving it for use.

App Vetting Rubric Version: 2

ABOUT US

TrustEd Apps Profile for Facilities Work Orders