• Limited Collection and Use: We collect and use Personally Identifiable Information (PII) only for authorizededucational purposes, with explicit consent from parents or students.
• No Selling of Student PII or Behavioral Targeting: We never sell PII or student information, including for targeted advertising.
• No Personal Student Profiles: Personal profiles of students are never created without explicit consent.
• Vendor Commitments: Student PII is never shared with vendors. We carefully select vendors that align with hour strict privacy commitments.
• Compliance: We ensure protected data is safeguarded in accordance with applicable laws including, butnot limited to GDPR, PIPEDA, FERPA, CIPA, PPRA, and COPPA.
• Data Requests: ThoughtExchange provides assistance with accessing, correcting, and deleting data.

• AI/LLM Model Training: ThoughtExchange never trains AI/LLM models with customer data. Enterprise agreements and technical controls ensure that our model providers do not retain or train their AI models with our customers’ data either.
• AI Transparency: To support informed and responsible AI use, all student-facing AI features and content are indicated with an icon and short reminder to review output.
• Fairness and Bias: AI features are built with patented technologies designed to support fair and unbiased participation.
• AI Governance: ThoughtExchange’s Chief Trust Officer oversees our AI governance program, which incorporates responsible design, testing, and decision-making for student-facing AI.
• No PII Processing: PII is logically separated at collection and is never submitted to or processed by AI.
• Responsible AI: ThoughtExchange leverages AI for positive social impact through surfacing collective intelligence and data analysis at scale, rather than for individual scoring.
• Safeguards: AI features are built, tested, and regularly re-tested by humans.

• Independent Certifications: ThoughtExchange is independently audited to ISO 27001, ISO 27701, and SOC 2 Type II compliance frameworks.
• Privacy and Security in Development: Privacy and security are foundational elements of ThoughtExchange’s product development, ensuring compliance with laws and regulations.
• Comprehensive Security Program: Our security program is designed to protect student PII through robust administrative, technological, and physical safeguards.
• Incident Response: ThoughtExchange ensures that incident response plans align with industry standards. In the event of any breach compromising personal information security, we swiftly investigate and take action to minimize its impact. Clients are promptly notified as per our agreements and legal requirements.

Please visit our security page for full details.

• Response Moderation: Leaders can review and moderate responses live, allowing for easy supervision over student participation.
• Role-Based Access Controls: You assign roles to your own users, controlling who can access or view student data in ThoughtExchange.
• Secure Engagement Environment: Build a secure and invitation-only engagement environment with limited-access features such as SSO, domain restrictions, and unique participation links.
• Configurable Engagements: Engagements can be customized. Choose anonymous or confidential participation (each with built-in participant privacy messaging) or add context through added text and links for your student audience.