Customer trust is important to us, and we're dedicated to providing a safe and transparent experience for everyone.
We collect only the minimal amount of data required to use our products and adhere to the principle of least privilege.
We prioritize the security and confidentiality of customer data.
We handle it with the utmost care and in compliance with all relevant regulations.
Data encryption
Sensitive data is encrypted both in transit (TLS 1.2) and at rest (AES-256). We do not transmit any data via physical media.
Access control
Strict access controls, based on the principle of least privilege, ensure that only authorized personnel can access sensitive data and systems.
User authentication
Multi-factor authentication (MFA) enhances user verification and prevents unauthorized access.
Regular security audits
Regular security audits and vulnerability assessments identify and address potential risks.
Data minimization
We collect only the essential data needed to deliver our services.
Incident response plan
A detailed plan ensures a swift response to any security breaches.
Employee training
Ongoing training helps our staff recognize security threats and implement data protection best practices.
Third-party risk management
We assess and manage risks associated with third-party vendors to ensure they meet our security standards.
Data retention and disposal
Strict policies govern data retention and secure disposal.
Everway’s commitment to global privacy laws and security standards provides you with the tools to meet your compliance requirements. Our security practices align with all applicable laws and regulations.
ISO 27001:2022
We implement an Information Security Management System certified to the requirements of ISO 27001:2022, audited annually by the British Standards Institute (BSI). Check controls in our Statement of applicability
Student Online Personal Protection Act (SOPPA)
The Student Online Personal Protection Act (SOPPA), is the student data privacy law that regulates students' covered information by schools, the Illinois State Board of Education, and education technology vendors.
Safer Technologies 4 Schools (ST4S)
Safer Technologies 4 Schools (ST4S) service is a national standardised approach to evaluating digital products and services used by schools across Australia and Aotearoa New Zealand.
Student Privacy Pledge
The Student Privacy Pledge safeguards student privacy regarding the collection, maintenance, and use of student personal information.
ISAE 3000-II assurance report
Independent auditor’s ISAE 3000-II assurance report on Appwriter, EduLife, TxtAnalyser, OrbitNote and Equatio.
US State Privacy Laws
Compliant with relevant US state privacy laws in California, Colorado, Virginia, and more.
Quebec Law 25
Quebec Law 25 is a privacy law that strengthens the protection of personal information in Quebec. It requires organizations to be transparent about data collection and use, obtain clear consent, appoint a privacy officer, conduct privacy impact assessments, report data breaches, and give individuals more control over their personal data.
GDPR
Compliant with data protection and data subject rights for EU residents.
FERPA
Privacy rights for educational information and records.
COPPA
Everway does not collect any information other than student login details which are transmitted securely.
Personal Information Protection Act (British Columbia)
The Privacy Act (1988) (Australia)
Age Appropriate Design
A code of practice for online services
Sub processors list
View a list of Everway products' sub processors
Our data packs provide full transparency with details on sub-processors, retention times, data flow, and product information.
You’ll get clear insights into the services our products provide, how data moves through the product, and key product details, ensuring compliance, security, and a complete understanding of your data handling.
Voluntary Product Accessibility Templates (VPATs) are currently being completed for our products. These document our digital products' conformance to the accessibility standard WCAG. Look out for the latest VPATs/Accessibility Conformance Report (ACRs) for each product in this section coming soon.
Equatio
OrbitNote
News2You
Polaris
AppWriter
LexiFlow
EduLife
uPar
SpeechStream
ReachDeck
We build responsible, trustworthy AI as part of our AI research and development.
Users trust our tools to create inclusive, supportive spaces and our priority is user safety and data protection. Our focus remains on creating a safe space for everyone to use our tools without worrying about their data.
This section includes key documentation commonly requested during procurement and vendor onboarding processes.
These resources provide important information about Everway’s business status, tax certification, and purchasing eligibility.
All documents are kept up-to-date to support a smooth and transparent partnership experience.
W-9 Form: An official IRS document that provides Everway’s taxpayer identification number and certification, used for tax reporting and compliance purposes when engaging in financial transactions. View / Download
Sole Source Letter: A statement confirming that Everway is the sole provider of Everway products and services, to support procurement processes that require sole-source justification. View / Download
Terms of Use: A statement confirming that Everway is the sole provider of Everway products and services, to support procurement processes that require sole-source justification.
View / Download
Global Data Protection Addendum (DPA): A statement confirming Everway's global data protection practices. View / Download
Recognized as a global leader in accessibility, Everway is proud to be included in Forbes’ inaugural list celebrating companies driving real impact.
How secure is Everway?
We’re constantly working to keep your data safe. Everway is serious about student and educator data protection, privacy, and system security controls. Our systems undergo regular internal and independent IT security testing and assessments, to ensure only the right people have access.
How does Everway protect my privacy?
Personal information that we collect and process in connection with our recruitment activities, is covered under our Employees, Contractors, Applicants Privacy Notice. This Privacy Notice for Everway, describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you access our website and engage with us in other ways.
What data does Everway collect?
Everway gathers essential details like your username, email, and preferences (contact, language) to provide you with our services. Your data is protected by robust security measures, ensuring your privacy. For complete details, please refer to our Privacy Policy.
How does the rebrand affect my existing contracts and data protection?
Our rebranding to Everway does not impact your existing legal and technical agreements with us. The underlying legal structures, including data controllers, remain the same. Your data will continue to be handled and protected according to all applicable data protection laws and regulations. While we may update our sub-processors from time to time, any changes will be communicated to you.
Importantly, the rebrand does not change our commitment: we will not use any licensed applications or customer data for training purposes. Your current contracts remain valid, and you generally do not need to take any immediate action. We will contact you directly if any contract amendments are necessary. If you have any further questions, please contact your usual account representative or our customer support team.
What is uptime and availability like?
Everway provides transparency into real-time and historical platform status:
Formerly Texthelp Product status https://status.texthelp.com/
Formerly n2y Product status https://status.n2y.com/
If you have any questions, please connect with your Everway representative.
Otherwise email dataprotection@everway.com
