34 CFR Part 99 • Family Educational Rights and Privacy Act
LaunchMyPath, LLC functions as a designated 'School Official' under 34 CFR § 99.31(a)(1)(i), operating under direct institutional control regarding the use and maintenance of student educational records.
Student session records utilize field-level encryption at rest, HTTPS/TLS transit security, rate-limiting shields, and isolated database architecture. Anonymous student ID logins are supported to eliminate the need to collect student names or emails.
EduPath complies with state student data privacy laws, including California AB 1584 / SOPIPA, New York Education Law 2-D, Illinois Student Online Personal Protection Act (SOPPA), and Texas Education Code Chapter 32.