Last updated March 25, 2026
All data remains in the United States
SOC 2 compliant - No offshore data processing
CoGrader stores and processes all customer data exclusively in the United States on Google Cloud Platform. SOC 2 certified, FERPA and COPPA compliant.
Infrastructure
CoGrader's production infrastructure runs on Google Cloud Platform (GCP) in data centers located within the continental United States. All student data, teacher data, assignment content, and AI-generated feedback is stored and processed domestically.
What data is covered
This data residency commitment applies to all categories of data processed by CoGrader:
- Student personally identifiable information (PII)
- Assignment submissions and student work
- AI-generated grades and feedback
- Teacher account and usage data
- School and district configuration data
- Backups and disaster recovery copies
Sub-processors
All third-party sub-processors used by CoGrader for data processing, including AI model providers, operate within the United States. No student or teacher data is transmitted to or processed in data centers outside US borders.
CoGrader maintains a list of sub-processors and their data handling locations. This list is available upon request for procurement and compliance review.
Compliance and privacy
CoGrader is designed to meet the requirements of federal and state student data privacy laws, including:
- Family Educational Rights and Privacy Act (FERPA)
- Children's Online Privacy Protection Act (COPPA)
- Student Online Personal Information Protection Act (SOPIPA)
- New York Education Law 2-d (Ed Law 2D)
- State student data privacy laws (California, Texas, New York, Florida)
CoGrader is backed by the U.S. Department of Education's Institute of Education Sciences (IES) and UC Berkeley, reinforcing our commitment to responsible data practices in education.
Questions
For data residency documentation, sub-processor lists, or compliance inquiries related to procurement, contact us at privacy@cograder.com.