A purchase stalls for months when the vendor has to be chased for paperwork. This page is the whole packet, item by item, with an honest status on each: what we hand you today, what we sign, and the two things we have not done yet, said out loud.
We sign your district's student data privacy agreement, including the state versions built on the Student Data Privacy Consortium's National Data Privacy Agreement. Our own Data Protection Addendum, Exhibit B of the subscription agreement, already commits in writing to no sale of student data, no advertising, no profiling, and no use of student data to train any AI model. Send us your district's form and it comes back signed. Send your NDPA →
Strata is not yet listed on the SDPC resource registry and has not yet signed the Student Privacy Pledge. Both are on our list. Neither is required for us to sign your agreement, and your district's signed NDPA can be posted to the registry by the district.
The questions every district questionnaire asks, pre-answered from what is actually built, on one page you can attach. Send us your own form (HECVAT, a state template, or your tech director's spreadsheet) and we complete it. Read the pre-answered questionnaire →
Every third party that touches data, what each one sees, and its certifications, kept current on the security page. Subprocessor SOC 2 reports and DPAs are available on request for your files. See the list →
Our infrastructure providers hold SOC 2 Type II and ISO 27001. Strata itself has not completed its own SOC 2 audit yet. The security whitepaper documents every control we run, and an external security review of the live application was completed in July 2026. Security whitepaper (PDF) →
An accessibility statement is published, with what is tested, what is honored from the operating system, and what has not been audited yet. A formal VPAT has not been completed; ask for one and we complete the self-assessment for your review. Read the accessibility statement →
SSO: Google Workspace and Microsoft Entra sign-in are live. Staff and students sign in with the school account they already have, and the school's own MFA carries through. Anyone without a school account gets a one-time code by email. Rostering: by file. Strata reads a roster or registration export from any student information system or forms vendor (FinalForms, DragonFly, Rank One, Privit, Aktivate, or a plain spreadsheet), and a published roster page by its link. Clever, ClassLink and OneRoster are not built yet. An annual file import is the honest answer today.
The subscription agreement commits Strata to commercially reasonable efforts to keep the platform available, with scheduled maintenance excluded. There is no separate uptime percentage with service credits in the standard agreement; if your district requires one, ask and we will discuss it. A live status page checks every Strata surface from your browser and links to our providers' own status pages. Signed-in devices keep working from a local copy during an outage, and kiosk check-ins queue and send later. Open the status page →
The school owns its data. Export it any time from inside the app, in standard spreadsheet formats. On termination the agreement requires Strata to make the data available for export and then delete its copies on request. A career record can move with an athlete to another Strata school. We also import from the systems we compete with, because a school that can leave is a school that can arrive. Retention and deletion →
For a high school, athletic training records are FERPA education records and no BAA is needed. For a clinic, a hospital-run program, or any customer that bills insurance, the business associate terms are already written into Exhibit B of the subscription agreement and are signed with it on day one. No separate negotiation, no waiting. FERPA / HIPAA policy (PDF) →
Strata Strength LLC, an Ohio limited liability company. The completed IRS W-9 is sent by email to your accounts payable contact, not posted publicly. Request the W-9 →
The subscription agreement commits Strata to carry cyber liability and technology errors-and-omissions coverage. Request a certificate naming your district and it is sent by email. Request a COI →
A letter on Strata letterhead stating what Strata does that no single other product does, written for a district procurement office, with your district's name filled in on request. Read the letter →
A written quote on Strata letterhead, valid for 60 days, with the tier, the term, what is included, and payment terms. Sent within one business day. Payment is by ACH or check, annually; card is available as a convenience. Request a quote →
One subscription agreement, an Order Form (Exhibit A) listing your school or schools and the total, and the Data Protection Addendum (Exhibit B). Public entities get venue and indemnity terms written for a board of education. Contracts are sent, signed and kept as files, never at an editable web address. Documents page →
Strata installs to the home screen on iPhone and Android today and runs as an app, with notifications. App Store and Google Play listings are planned and not yet published.
Email your district's forms, or ask for the whole packet in one message, and it comes back within a business day.
