Your data stays yours
Heronix software runs on your servers and collects nothing. Student data never reaches us. This page is the short version for IT directors, privacy officers, and procurement; every point links to the detail.
The short answers
The questions districts ask first.
What does Heronix software send to Heronix?
Nothing. No telemetry, no usage tracking, no location tracking, no update check, no phone-home. Licenses are activated offline, and you decide when to apply updates. What runs on your servers stays on your servers.
Where does student data live?
On your servers, inside your network, under your control. We never receive it, so we are not a recipient, a processor, or a school official for your education records. External integrations are designed to pass through Guardian, a gateway you run. For IT & security
Will you sign our data privacy agreement?
Yes. We sign your district’s own form, the Student Data Privacy Consortium’s National Data Privacy Agreement (NDPA), or our Data Privacy Agreement, whichever you prefer.
What does this website keep?
Only what an account needs: your name, email, organization, a hashed password, and what you download. Visit counts are our own, with no tracking cookies, no third-party analytics, and no stored IP addresses. We never sell, rent, or share it for marketing. Privacy policy
How we protect what we do hold
The website and store are small on purpose, and locked down.
Stored only as Argon2id hashes, never in a form we could read.
Taken on Stripe’s own page. Card and bank details never reach our servers.
Digitally signed, so a key cannot be forged or altered.
Encrypted before they leave the server, and kept on separate drives.
Two-step sign-in, with a fresh code required for anything involving money or keys.
Every script, font, and image is served from our own domain, enforced by a strict Content Security Policy.
Certifications, honestly
We do not currently hold third-party certifications such as SOC 2 or ISO 27001. Those audit a vendor that hosts your data, and Heronix does not host it: your data stays on your infrastructure, under your own controls, and the software is built to send nothing out. Ask us anything your security review needs.
Found a security issue?
Please tell us before you tell anyone else, and we will work with you to fix it. Email support@heronixedu.com with enough detail to reproduce it.
Our disclosure contact is also published at /.well-known/security.txt.