FERPA-ready for schools — with a signed DPA
FERPA does not certify vendors. Schools stay compliant by putting InternPick under a written Student Data Privacy Agreement as a school official. That is the lawful path, and it is built in.
Signed Student Data Privacy Agreement
Your school accepts the Student Data Privacy Agreement at signup. InternPick then acts as a school official for work-based learning — the same model districts use with other instructional vendors.
Your school controls access
You invite staff, students, and business hosts. Roles, guardian consent, and retention stay in your Settings. District A cannot see District B.
Business hosts only see what students share
Assigned business hosts see schedule and hours. Resume, phone, and bio stay private until the student opts in. There is no public employer search.
How InternPick and your school work together
InternPick provides and operates the platform. Your school remains the school of record. Students choose what assigned hosts may see beyond schedule and hours.
Your school
- Invite staff, students, and business hosts, and assign roles
- Approve placements and remain responsible for supervision
- Keep FERPA notices, consents, and board policy current
- Name InternPick as a school official in your annual FERPA notice where that fits local practice
InternPick
- Provide and operate the InternPick platform, including sign-in
- Enforce the permissions you configure
- Process student data only to run the features you enable
- Never sell student data or use it for advertising
Students
- Choose whether assigned business hosts may see resume and contact
- Log hours and complete placements through the school program
- Ask the school first for education-record access or deletion
What you can verify today
- Student Data Privacy Agreement you can accept and shareLive
- Staff, students, and business hosts see only what their role allowsLive
- Who-can-see map for directory vs host-visible fieldsLive
- Student opt-in before business hosts see resume or phoneLive
- Access and export history in the change logLive
- Authenticator MFA for school adminsLive
- Remove a student’s school records on requestLive
- Student AI resume assist off until the school turns it onLive
- No Google Analytics while staff or students are signed inLive
- Student information system (SIS) syncComing later
- District single sign-on (SAML / OIDC)Coming later
- SOC 2 Type II reportComing later
Documents for counsel
Full legal text stays on its own URL. Start here, then send the school data agreement if they want the contract.
- Student Data Privacy AgreementThe contract counsel reviews
- Platform agreementFacilitator terms for the school account
- Privacy PolicyHow InternPick handles personal information
- Terms of UseSite and account terms
- CookiesOptional GA4 on public pages only; off while signed in
- Counsel appendixData inventory, vendors, and FAQs
For counsel & procurement
Data InternPick stores, vendors we use, and answers to common district questions live on a separate appendix so this page stays short for coordinators.
Counsel appendixStudent-data inventory, subprocessors, and procurement FAQsContact
Privacy and Student Data questions: privacy@internpick.com.
Share this page and the Student Data Privacy Agreement with district counsel if they want the full contract. Questions about InternPick’s processing: privacy@internpick.com.