Uncompromising Data Security & Compliance
The safety of students is your top priority, and protecting their information online is ours. RankOne is an industry leader in data security and top tier compliance to make sure that sensitive student forms, documents, and information are stored and sent safely.
Compliance at every level
Send it with confidence
Student info and sensitive data is passed through messages every day. With the RankOne messenger, you can be sure you are exchanging information legally and securely.
Better Student Care
We are committed to protecting sensitive student and healthcare data through strict adherence to federal privacy standards. Our platform is HIPAA compliant, safeguarding protected health information (PHI) and ensuring secure handling of medical records. We are also FERPA compliant, supporting educational institutions in maintaining student privacy, legal compliance, and transparency with families.
Additionally, we follow PPRA guidelines, ensuring responsible collection and use of student information and giving parents and schools control over sensitive data. Together, these standards reflect our dedication to data security, privacy, and responsible management for the communities we serve.
Your data is safe with RankOne
Accessibility via WCAG and ADA Level AA compliance
Our software is designed to be accessible to all users, including those with disabilities. We follow the Web Content Accessibility Guidelines (WCAG) and meet ADA Level AA standards, ensuring features like readable text, screen reader compatibility, and clear navigation.
We Build Our Software For Everyone
VPAT COMPLIANT
RankOne maintains a current Voluntary Product Accessibility Template (VPAT) documenting conformance with Section 508 of the Rehabilitation Act and WCAG 2.1 Level AA standards. Our VPAT ensures transparency in how our platform meets accessibility requirements, enabling school districts and institutions to make informed procurement decisions with confidence.
> Learn About VPAT
HECVAT APPROVED
Like many vendor risk assessment templates, the Higher Education Community Vendor Assessment Toolkit combines vendor risk management best practices and common security control requirements for reducing third-party risks.
> View More
Server Compliance
SOC 2 compliance standards are part of our commitment to security, availability, processing integrity, confidentiality, and privacy of customer data. We undergo regular audits to maintain this certification, providing you with peace of mind.
Audited Via AWS
Data Encrypted in Transit (TLS 1.2 / 1.3) and at Rest (AES-256)
Penetration Testing and Vulnerability Scanning
Specified AWS US Data Centers
Daily Backups and Recovery Plan in Place
Communication Matters
How your data is used and who can access it is important, and while we don't want your data falling into the wrong hands, we want it to be accessible to the right people, regardless of their physical limitations or health condition.
WCAG ADA Level AA
RankOne is WCAG (Web Content Accessibility Guidelines) and ADA (Americans with Disabilities Act) compliant, demonstrating our effort to ensure digital content and web services are accessible to individuals with disabilities.
ISO-certified security measures
Our communications meet the ISO (International Organization for Standardization) standards for best practices in various aspects of RankOne's operations, including security measures 27001, 27017, and 27018.
Account Access Controls
We limit access to your data using strong security practices: secure passkeys, multi-factor authentication (MFA), and least-privilege access. This ensures that only authorized personnel can access sensitive information, minimizing risk.
Passkey
Multi-Factor Authentication
Least-Privilege Access
LEVEL 2 TX RAMP CERTIFIED
In the 87th Legislative Session, the Texas Legislature passed Senate Bill 475, requiring the Texas Department of Information Resources (DIR) to establish a state risk and authorization management program that provides "a standardized approach for security assessment, authorization, and continuous monitoring of cloud computing services that process the data of a state agency." RankOne is fully compliant with TX RAMP requirements and the regulations mandated by the State of Texas.
> View TX RAMP Certification
PCI DSS COMPLIANT
RankOne has achieved PCI DSS SAQ A compliance, validated through an independent Attestation of Compliance (AOC) conducted by ControlGap. Our payment architecture fully outsources card processing to PCI-compliant third-party providers. RankOne does not store, process, or transmit cardholder data, meeting the lowest-scope PCI requirements while maintaining industry-standard security for all payment transactions.
> View PCI Security StandardsThank you for your trust
At RankOne, we do more than just adhere to industry standards; we go above and beyond to make sure you and your students are protected under our watch. If you have a safety question, feel free to reach out to us at support@rankone.com
Frequently Asked Questions
Is RankOne HIPAA compliant?
Yes, RankOne is fully HIPAA compliant, safeguarding protected health information (PHI) and ensuring secure handling of medical records. The platform's messaging system is also HIPAA compliant for secure exchange of sensitive student health information.
How does RankOne protect student data?
RankOne protects student data through multiple layers of security: data is encrypted in transit using TLS 1.2/1.3 and at rest using AES-256 encryption. The platform uses secure passkeys, multi-factor authentication (MFA), and least-privilege access controls. Regular penetration testing and vulnerability scanning are performed, with data stored in specified AWS US data centers with daily backups.
What security certifications does RankOne hold?
RankOne holds SOC 2 compliance certification (audited via AWS), TX-RAMP Level 2 certification from the Texas Department of Information Resources, PCI DSS SAQ A compliance (validated by ControlGap), HECVAT approval for higher education vendor risk assessment, and ISO certifications including 27001, 27017, and 27018.
Is RankOne FERPA compliant?
Yes, RankOne is FERPA compliant, supporting educational institutions in maintaining student privacy, legal compliance, and transparency with families. The platform also follows PPRA guidelines, ensuring responsible collection and use of student information.