Data & privacy

Student records, goals, session data, services, attendance, meetings and communications are stored in Bright Path's managed cloud database, associated with the caseload they belong to.

Data is transmitted over HTTPS and is not sold, rented, or used to train third-party models. AI drafting features send only the text you supply for that draft, and the result is returned to you to edit — it is not published anywhere on your behalf.

Every route in the app requires sign-in. There is no anonymous access to student records.

Data is scoped to a caseload. Only people you explicitly add as members of a caseload can view or edit that caseload's students, goals and data. Members of other caseloads cannot see it, and neither can signed-out visitors.

Caseload owners control membership and can remove a member at any time, which immediately ends that person's access.

Deletions and restores are recorded in the caseload Activity log, so a team can see who changed what.

You can export a full backup of your caseload from the Students page at any time, and export compliance summaries as CSV.

Progress reports, one-pagers and parent letters export as PDF or PNG for filing in your district's system of record.

Deleting a student removes their goals, data sessions, services, attendance, communications and meeting notes with them.

Deleted items move to Trash first so an accidental deletion can be restored, and are then purged permanently.

If you want a caseload removed entirely, delete its students and then leave or delete the caseload — this cannot be undone.

Bright Path is a tool for educators; it is not a legal determination of FERPA compliance for your setting.

Complete your school or district's privacy, FERPA, access-control, data-retention and security review — and any required vendor or data-sharing agreement — before entering real student-identifying information.

Until that review is complete, consider using initials or student IDs rather than full names.