COPPA compliant
No personal data collected from students — only nicknames and age ranges. No ads, no third-party trackers.
Privacy & trust
Safe by default.Approved by you.
Every device that connects to a classroom is approved by the teacher. Minimal data, clear lifecycle, auditable trail. Versioned consent enforces re-consent when our processing terms change.
ComplianceCOPPA · GDPR
Audit60+ events
Retention2 years
FERPACOPPAGDPRDPANo ads · No trackersSSO & SAML60+ audit events
Compliance by design
Privacy, compliance, and trust — built in
US (FERPA) and EU (GDPR), set automatically per school. Regulated buyers get what they need out of the box. No legal-review rabbit hole.
GDPR export & deletion
Article 15 data export triggered by the school owner. Account deletion with a 30-day grace window, then automated cleanup.
Versioned consent
Per-user consent tracking across Privacy Policy, Terms, Cookie Policy, and DPA. When a new version ships, users re-consent before continuing.
Data Processing Agreement (DPA)
Downloadable Dutch-language DPA PDF — generated on demand and signed per school.
Audit logging
60+ action types logged with school, user, IP, and timestamp. Super-admin reviewable, exportable.
Hardened by default
JWT with refresh-token rotation, reCAPTCHA v3 on registration, Redis-backed rate limiting, HTTPS everywhere.
Device management
Every device approved by you.
Per-classroom device approval with a clear pending / approved / rejected audit trail. Auto-accept, case-by-case, or off — the policy is yours.
www.samiolearning.com/schools/dashboard/devices
- Per-classroom policies
Auto-accept on, off, or case-by-case.
- Revoke anytime
Remove a device with one click.
- Pending · approved · rejected
Clear audit trail per classroom.
- 2-year retention
Minimal data, clear lifecycle.
What's different
Compliance by design, not as a bolt-on
Hybrid FERPA (US) / GDPR (EU), resolved automatically from the school's country. GDPR Article 15 data export and account deletion with a 30-day grace window. Versioned consent tracking across Privacy, Terms, Cookie Policy, and DPA. Audit logging across 60+ action types. A downloadable DPA in Dutch. Built in, not added later.
- Hybrid FERPA (US) / GDPR (EU) — resolved per school
- Per-user consent versioning with enforcement
- Audit log, rate limiting, reCAPTCHA-protected registration
US & EU
One platform, two legal frameworks
Your compliance model is set automatically from your school's country — no extra setup. US schools operate under FERPA/COPPA; every other country under GDPR.
FERPA / COPPA
United States — FERPA / COPPA
Samio acts as a School Official under your district's direct control. Class rosters are directory information (opt-out), and account closure anonymizes and retains de-identified education records for your archival obligations.
Read the School Official Agreement →GDPR
EU / EEA / UK & beyond — GDPR
Samio is your Data Processor under a signed DPA. Peer visibility is opt-in per student, and account deletion purges all personal data after a 30-day grace period.
Keep exploring
More of the platform.
Get started
Ready to Transform Your Classroom?
Join educators worldwide who trust our smart platform for engaging, curriculum-adapted learning.
