Security
Security and data
Last updated: August 2026
This page sets out how Conclusive treats student data, what is in place today, and how an institutional review gets the detail it needs.
What is true today
Conclusive holds no institutional student data. The product is not yet deployed at an institution, and the demonstration on this site uses synthetic data — records written for illustration, not drawn from any real person.
FERPA
Conclusive is designed to work under FERPA's school official exception. In that arrangement the institution stays in control of its education records: Conclusive acts under the institution's direction, uses those records only for the purpose the institution defines, and does not redisclose them.
FERPA obligations are written into the agreement before any institutional data is involved, not asserted afterwards.
How the product handles student data
Preparation is role-appropriate by design: a person sees what their role is responsible for, and material that must stay separate is kept visibly separate rather than folded into a summary.
Conclusive prepares one defined situation. It does not build a standing profile of a student and it does not score students.
What is known, what is still open, and what stays outside the response are kept distinct, so gaps stay visible instead of being filled by assumption.
AI and your data
The demonstration on this site is self-contained and trains nothing.
For a deployment, how institutional data is used, how long it is kept, and which services are involved are settled with your team in writing before anything is turned on.
Consequential decisions stay with authorized staff. Conclusive prepares the situation; a person makes the human move, and the reasoning behind that decision carries forward with the work.
This website
This site has no accounts, no forms, and no advertising trackers. It serves static pages under a content security policy that blocks framing and restricts scripts to this site and its analytics provider, and its only contact path is email. The Privacy Notice covers what the site itself collects.
An institutional review
The detail a security or privacy review needs — how data flows, how access is scoped, how long things are kept — is handled directly with your team, in writing, during diligence. A basic question about how we treat student data does not require a signed agreement to get a straight answer.
Conclusive, Inc. is a Delaware corporation and is privately held.
Reporting a security issue
If you believe you have found a security problem with this website, email hello@conclusivehq.com.