MCA uses Level Data to facilitate a relationship between PowerSchool and Office 365

In order to facilitate an efficient and secure exchange of data between our School Information Service (PowerSchool) and our Suite of Learning Tools (Office 365) we use Level Data's "Student Sync."  This tool is hosted on our local server (our Active Directory) and is not available directly between PowerSchool and Office 365.  The sync of data is to our local environment and then the relevant cloud services.  We are confident and have reviewed Level Data's commitment to data security.  Their policies are available for review at their site in both their Terms of Use and Privacy Policy.

Pertinent Selections from the Terms of Use:

THIRD PARTY ACCESS

Customer may designate third parties who are authorized to securely access its student information. Level Data shall not re-disclose student information to any third parties unless explicitly authorized, in writing, by Customer. Customer may, at any time, revoke any access to student information by providing written notice to Level Data.

CONFIDENTIALITY

Level Data agrees to deem all student information provided to it by Customer from the SIS or other systems as confidential and not to be shared with third parties without written authorization. Further, Level Data agrees to comply with applicable provisions of the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. 1232g, and other regulations as required.

And from the Privacy Policy:

HOW WE STORE AND PROTECT YOUR INFORMATION

3.1 Storage and processing

Your information collected through the Service is processed in the country in which Level Data service providers maintain facilities. If you are based in the United States and use our Service, you consent to have your data processed by Level Data in the United States. International clients have differing needs based on their country of origin and we provide custom storage and processing solutions to meet those requirements. Keeping information safe: Level Data maintains strict administrative, technical and physical procedures to protect information processed via our servers. Access to information is limited (through user/password credentials and two-factor authentication) to those employees who require it to perform their job functions. We use industry-standard Secure Socket Layer (SSL) encryption technology to safeguard the account registration process and sign-up information. Other security safeguards include but are not limited to data encryption, firewalls, VPN, physical access controls to building and files, and an end-to-end zero-knowledge environment in which identifiable data is only available to the customer.

Again, full disclosure of both use and policy are available for review at their site in both their Terms of Use and Privacy Policy.