Trust Center

Answers to the privacy, security, and compliance questions your team needs before adopting a new platform — covering data protection, content oversight, and your rights as an organization.

How is data stored and protected in uReport?

All uReport data is stored on secure, cloud-hosted infrastructure with industry-standard encryption at rest and in transit. Access to data is restricted by role-based permissions, and all system activity is logged for auditing purposes.

Does uReport encrypt data in transit?

Yes. All data transmitted between users and the uReport platform is encrypted using TLS (Transport Layer Security). This applies to story creation, media uploads, approvals, and publishing activity.

Who has access to our organization's data?

Only authenticated users within your organization can access your content and data. uReport staff do not access customer data except when required to resolve a support issue, and only with appropriate authorization.

How are user access and permissions managed?

uReport uses a role-based access control (RBAC) model. Admins assign roles — writer, editor, approver, publisher — each with defined permissions. Access can be granted or revoked at any time, and all permission changes are logged.

Does uReport undergo security testing or audits?

uReport performs regular internal security reviews and vulnerability assessments. We are committed to proactive security practices and ongoing platform hardening as the product evolves.

What happens if there is a security incident?

In the event of a security incident affecting customer data, uReport will notify affected organizations promptly in accordance with applicable legal requirements. We maintain an internal incident response plan and work swiftly to contain, assess, and remediate any issues.

Is uReport FERPA compliant?

uReport is designed with FERPA requirements in mind. The platform gives schools control over who can access student-related content, enforces approval workflows before publishing, and does not sell or share student data with third parties. Schools remain the data controller for their content.

Is uReport COPPA compliant?

uReport does not directly collect personal information from children under 13. The platform is used by administrators, coaches, and staff — not directly by minors. Organizations are responsible for ensuring appropriate use of the platform within their context.

Does uReport comply with state-level privacy laws (e.g., CCPA)?

uReport is designed to support compliance with applicable state and federal privacy regulations. We do not sell personal information and provide mechanisms for data access and deletion requests. Contact us for specifics related to your jurisdiction.

Does uReport sell or share user data with third parties?

No. uReport does not sell, rent, or share personal data or organizational content with third parties for advertising or commercial purposes. Data is used solely to deliver and improve the uReport platform.

Where is uReport data physically stored?

uReport data is stored in the United States on cloud infrastructure provided by trusted hosting partners. We do not transfer data outside the U.S. as part of standard operations.

How does uReport handle requests to access or delete data?

Organizations can request access to their data or deletion of their account at any time by contacting uReport support. We respond to verified requests in accordance with applicable law and our data retention policies.

Does uReport have a privacy policy?

Yes. uReport's full privacy policy is available on our website and governs how we collect, use, and protect information across the platform. We encourage all administrators to review it before deployment.

How does uReport ensure AI-generated content is accurate and appropriate?

AI in uReport assists with structure and formatting — it does not autonomously publish content. Every story goes through your organization's defined approval workflow before anything goes live. A human reviews and approves all content.

What guardrails exist around AI assistance?

uReport's AI tools are scoped to assist with story structure, clarity, and formatting within the context of your organization's content. The AI does not generate content independently, access external information, or make publishing decisions.

How is media submitted through uReport Connect reviewed?

Media contributed by parents, fans, or community members through uReport Connect is held in a review queue. Designated staff review and approve (or reject) submissions before they appear in stories or galleries. Nothing is published automatically.

Can administrators restrict what types of content can be published?

Yes. Admins control which users have access to publish, what story types are available, and which social channels are connected. Role-based permissions ensure that only authorized individuals can move content through the workflow.

How does uReport protect against inappropriate content being published?

uReport's multi-step approval workflow is the primary safeguard. No content goes live without passing through the approval chain set by your organization's admins. This keeps content quality and appropriateness under your team's control.

Is uReport appropriate for use in K-12 environments?

Yes. uReport is designed for use in schools and youth-serving organizations. The platform gives administrators full control over content, users, and publishing — with appropriate workflows to support responsible use in educational settings.

What is uReport's uptime commitment?

uReport is hosted on reliable, scalable cloud infrastructure designed for high availability. We target consistent uptime and monitor platform health continuously. Specific SLA terms are available for Enterprise customers.

What happens if the platform experiences downtime?

In the event of unplanned downtime, our team works to restore service as quickly as possible. Status updates are communicated to affected customers. Planned maintenance is scheduled during off-peak hours and announced in advance when possible.

How often is data backed up?

uReport performs regular automated backups of customer data. Backups are stored securely and can be used to restore service in the event of a system failure.

How are platform updates and new features deployed?

uReport releases updates incrementally using standard software deployment practices. Major changes are tested in staging environments before release. We aim to deploy updates with minimal disruption to active users.

Is uReport scalable for large organizations or multi-team deployments?

Yes. uReport's infrastructure scales to support organizations with multiple teams, high publishing volumes, and concurrent users. Enterprise plans include dedicated configuration support for large or complex deployments.

Who do we contact if there's a technical issue?

All plans include access to uReport support via our support request form. Higher-tier plans include priority support with faster response times. For urgent issues, Enterprise customers have direct escalation paths.

Who owns the content created in uReport?

Your organization owns all content created in uReport. uReport does not claim any intellectual property rights over stories, photos, or other content your team produces on the platform.

Can we export our data or content?

Yes. uReport supports data export for organizations that need to retrieve their content. Contact our support team to initiate an export request for your organization's data.

What happens to our data if we cancel our subscription?

If you cancel your subscription, your data remains accessible through the end of your billing period. After that, your data is retained for a defined period to allow for recovery if needed, then securely deleted. Contact us before canceling if you need to export content.

How long does uReport retain organizational data?

uReport retains your organization's data for as long as your account is active, plus a defined retention period following account closure. Specific retention schedules are outlined in our privacy policy.

Can we request deletion of all our organization's data?

Yes. Organizations can request full deletion of their data by contacting uReport support. We process verified deletion requests in accordance with our data retention policy and applicable legal requirements.

Does uReport use our content to train AI models?

No. uReport does not use your organization's stories, media, or content to train AI models. Your content is yours, and it stays within the uReport platform.

How can we get a copy of your security documentation or data processing agreement?

Organizations that require formal security documentation, a Data Processing Agreement (DPA), or other compliance materials can contact us directly. Enterprise customers receive these as part of their onboarding.