Your Data
Who owns the data we put in Sibme?
You do. Your educational institution owns and controls all data in your account, including student data. Sibme acts as a “School Official” under FERPA and uses your data only to provide the services your institution has authorized.
Can anyone see my videos?
Not unless you allow it. Anything you upload to your Workspace is private by default. Videos in a Huddle are visible only to the members of that Huddle. You decide who can see your content.
Does Sibme sell our data or use it for advertising?
No. Sibme does not sell student data. It does not show personalized ads, share student data with advertisers, or build advertising profiles.
Does Sibme share our data with third parties?
Sibme does not share your videos or identifiable data with third parties for their own use. To run the platform, Sibme uses a small set of contracted service providers (subprocessors) for things like hosting, transcription, and AI analysis. They are bound by contract and process data in the United States. The full list of subprocessors is on our Compliance page, where you can also sign up to be notified when it changes.
Can we export or delete our data?
Yes. Districts have full rights to export and delete their data. Sibme does not knowingly keep student personal information longer than an educational purpose requires unless your institution authorizes it. Parents and students should send requests to access or delete student data to their school or district, which controls that data.
Security
Where is our data stored?
Sibme is hosted on Amazon Web Services (AWS). AWS data centers have 24/7 physical security and multi-factor access controls. AWS holds ISO 27001 certification, is a PCI DSS Level 1 service provider, and is audited annually under SOC 1.
Is our data encrypted?
Yes. All data sent between your browser or device and Sibme travels over encrypted TLS/SSL connections.
Who at Sibme can access our account?
Sibme staff access account information only to provide service and support. Only a few key employees can reach Sibme’s AWS environment, and they must sign in with two-factor authentication.
How do users sign in?
Users can sign in with an email and password, with Google, or through your organization’s single sign-on provider (such as Microsoft Azure/AD or Canvas).
What happens if there is a security incident?
Sibme has a formal Data Breach Notification Policy that covers incident response, recovery, and notifying affected customers. Sibme also keeps detailed audit logs and has quarterly third-party security and penetration testing.
Compliance
Which privacy laws and standards does Sibme meet?
FERPA: Sibme follows FERPA as a School Official, and your institution controls student data.
COPPA: Children under 13 may not create Sibme accounts, and Sibme never collects personal information directly from students. Your institution manages consent for students under 13 who appear in recordings.
TX-RAMP Level 2: Certified, which means Sibme meets Texas security standards for state agencies and school districts.
ISO 27001 and ISO 9001: Information security management and quality management.
CCPA: Sibme complies where applicable.
EU-U.S., UK, and Swiss-U.S. Data Privacy Frameworks: Sibme is certified with the U.S. Department of Commerce.
PCI DSS: For credit card processing.
Section 508 and WCAG 2.1 (A and AA): Accessibility standards. A VPAT is available.
Can we get a Data Privacy Agreement (DPA) or other compliance documents?
Yes. Data Privacy Agreements, the subprocessor list, and full compliance documentation are available to districts on request. Contact [email protected].
AI and Your Data
Is our data used to train AI models?
No. Your data is never used to train Sibme’s AI models or any third-party provider’s models. That includes videos, transcripts, documents, and any district curriculum you add to Copilot.
What happens to our data when Sibme’s AI analyzes it?
Sibme uses enterprise-grade AI models to analyze transcripts, documents, and text you provide. Data sent to these models is encrypted in transit and anonymized whenever possible. Only authorized Sibme services can send it. The AI providers don’t keep it: once the analysis is finished, the data is deleted.
Does the AI analyze our recordings automatically?
AI insights such as Copilot prompts and AI Reports run only when a user in your account starts them. Your content is never analyzed by AI unless someone in your account requests it.
Does the AI make decisions about teacher performance?
No. Sibme’s AI is designed to surface evidence and patterns that support coaching and growth. It does not make automated judgments about performance. Educators and evaluators should always review AI output against the classroom evidence.
Can Copilot use our district’s curriculum?
Yes. When configured, Copilot can use your district’s adopted or in-house curriculum to analyze how it is being implemented. Your curriculum is treated as district-controlled data. It is not shared with third parties or used to train any AI model.
Students, Faces, and Voices
What if students appear in our recordings?
Classroom recordings may capture students’ faces, voices, or names. Sibme recommends:
Getting consent for recording and sharing video according to your institution’s policy. A sample Video Permission Consent Form is available from Sibme. Have your legal counsel review it before you use it.
Removing student names and other personal information from student work before you upload it.
Using Blur Video to blur student faces, where your account has this feature.
How is biometric data used?
Biometric features are available only to teachers, administrators, and higher-education students. They are not typically used with K-12 students.
Voice data identifies speakers in transcripts and recognizes the teacher for AI Reports.
Facial data tracks teacher movement in the classroom for the Movement AI Report.
Your institution controls whether these features are used and is responsible for obtaining any required consent. If a parent, guardian, or teacher believes a child’s data was collected without consent, they can email [email protected] to request deletion.
Questions?
For privacy, security, or compliance questions, contact our legal and compliance team at [email protected], or reach out to Sibme Support from the chat in the app.