NTN Gradebook Security Model

• The NTN Gradebook plugin for Canvas is hosts data on the Heroku platform which is PCI, HIPPAA, ISO, and SOC compliant. More information can be found at https://www.heroku.com/policy/security
• The NTN Gradebook uses industry-standard HTTPS encrypted direct communications with the Canvas-LMS system
• Before any data is presented to the user, the NTN Gradebook uses LTI security (HMAC-SHA1) for authentication
• The NTN Gradebook has no other data sources outside the Canvas system and all interaction are only allowed through LTI-authenticated users
• The NTN Gradebook maintains audit logs showing manual access of date

To function properly, the NTN Gradebook interacts with data in Canvas. Data sharing is limited to only what is required to perform essential tasks. While this does include personally identifiable information, it does not include sensitive information like phone numbers, email address, or IEP information.

When granted permissions by the Canvas administrator, the NTN Gradebook interacts with the following student and course information in Canvas:

USERS

First Name
Last Name
User ID

COURSES

Course Name
Grading Periods
Assignment Name and Type
Assignment Scoring Information (points possible)
Student Enrollment Status
Student Scores (points earned by student)
Student Grades