Security & Compliance

Data Protection & Compliance

At RepLogix, we take the security and privacy of your athletic data seriously. We are committed to building and maintaining a platform that protects your information while working toward industry-standard compliance certifications.

FERPA Aligned
COPPA Aligned
ISO 27001 (In Progress)
SOC 2 Type II (Roadmap)
Enterprise-Grade Encryption
Role-Based Access Controls
Secure Cloud Infrastructure

Compliance Frameworks

Our commitment to recognized security standards

Aligned

FERPA

RepLogix is designed to support educational institutions in handling student records in accordance with FERPA requirements.

  • Student record access controls
  • Directory data consent management
  • Data minimization for student info
  • Aligned with school district privacy expectations
Aligned

COPPA

RepLogix is designed to support compliance with COPPA when applicable for organizations serving athletes under 13.

  • Parental consent workflows supported
  • Minimal data collection for minors
  • No behavioral advertising to children
  • Data deletion upon request
In Progress

ISO 27001

RepLogix is implementing an Information Security Management System (ISMS) aligned with ISO 27001 as part of our long-term security program.

  • Risk assessment and treatment program
  • Documented security policies and procedures
  • Regular security awareness training
  • Continuous improvement cycle
On Roadmap

SOC 2 Type II

RepLogix is preparing for future SOC 2 Type II certification as our customer base grows.

  • Implementing SOC 2 control framework
  • Vendor risk management program
  • Incident response and monitoring
  • Annual third-party audit (planned)
Available Upon Request

HIPAA

Business Associate Agreements (BAAs) are available for organizations that require them. RepLogix incorporates HIPAA-aligned administrative, technical, and physical safeguards where applicable.

  • Business Associate Agreements available
  • Encryption in transit and at rest
  • Role-based access controls
  • Audit logging and monitoring

Our Security Practices

How we protect your data every day

TLS 1.2+ Encryption

All data is encrypted in transit using TLS 1.2+ and sensitive data is encrypted at rest using industry-standard protocols.

Role-Based Access Control (RBAC)

RBAC ensures users only see data they are authorized to access. Administrators control all permission levels.

Organization & Team Data Isolation

Multi-tenant segregation ensures each organization's data is logically separated. Coaches and teams only access their own athletes' data.

Secure Cloud Infrastructure

Hosted on cloud infrastructure with redundant systems, continuous monitoring, and regular security updates.

Automated Backups & Disaster Recovery

Automated backups and disaster recovery procedures protect against data loss and support business continuity.

Continuous Monitoring & Logging

Continuous system monitoring and logging help detect and respond to security events promptly.

Least-Privilege Access

Access is granted on a least-privilege basis — users and services receive only the permissions required for their role.

Vulnerability Management

Regular security updates and vulnerability management keep systems patched and protected against known threats.

Data Ownership

Your data belongs to you — always

  • Organizations retain ownership of their data.
  • RepLogix does not sell customer data.
  • Customer data is encrypted and logically separated between organizations.
  • Data can be exported or deleted upon request in accordance with our retention policies.

FERPA & COPPA Compliance

RepLogix is designed with educational institutions in mind. We align with FERPA (Family Educational Rights and Privacy Act) requirements for handling student records and COPPA (Children's Online Privacy Protection Act) guidelines for any data involving minors under 13. Learn more in our FERPA/COPPA Compliance page.

Need Compliance Documentation?

If your organization requires a BAA, security questionnaire response, or compliance documentation, please reach out and our team will assist you.

Contact Us