Skip to content
Faces to Names

Trust Center

Trust at Faces to Names

Student records are stored in Montréal, Canada, are never sold or used for advertising, and are protected by board single sign-on and an audit log of administrator access.

Faces to Names is a Canadian registered charity. Students use it to research a person named on a war memorial and record what they find. This page is for the school boards, teachers and reviewers who need to know how that work is kept safe.

Request accessContact security

At a glance

  • In place

    Data residency

    Stored in Montréal, Canada

    The database (PlanetScale) and uploaded files (Google Cloud Storage) are in Montréal. The app is hosted by Vercel in the United States, and some providers process data outside Canada.

  • In place

    Encryption

    TLS 1.2 or higher in transit

    All traffic is encrypted with TLS 1.2 or higher, with HSTS. Uploaded files are encrypted at rest with AES-256. Our database provider encrypts data and backups at rest with AES; we are confirming its key length.

  • In place

    Board single sign-on

    Board accounts sign in through the board

    Anyone with a participating board's email address must sign in through that board's Microsoft Entra ID.

  • In place

    Role-based access

    Checked on every request, with an audit log

    The API checks each caller's role and class before it returns anyone's data. When an administrator views the platform as a user, opens a student's review or deletes a user or project, it is recorded in an append-only log.

  • In place

    AI use

    An evidence report for the teacher

    After a student submits, an automated assistant checks historical claims against authoritative sources and writes an evidence report for the teacher, who decides. FTN does not use student work to train a model of its own.

  • In place

    Breach notice

    The board is told within 24 hours

    If we discover a suspected or confirmed breach involving a board's data, we notify the board's designated contact within 24 hours, send updates, then a final written report.

Security controls

Safeguards in place today, in plain words. The full policies are available on request.

  • Infrastructure

    • Data is encrypted in transit.
    • Application secrets are never stored in source code.
    • Production data is never copied to test or development environments.
    • The database is backed up regularly.

  • Access

    • Board accounts sign in through their board's single sign-on.
    • Access to data is restricted by role and checked on every request.
    • Classroom work stays within the class until it is approved for sharing.
    • Administrator access to user data is logged.
    • Access to production systems is restricted and approved.
    • Production systems require multi-factor authentication.

  • Data

    • Personal data is kept out of logs and analytics.
    • A board's data is deleted when the board asks.
    • Boards and students can request an export of their data.

  • Product security

    • Changes are tested before release.
    • Dependencies are monitored for security issues.
    • Database changes are versioned.

  • Incident response

    • Affected boards are told promptly about a breach involving their data.
    • Every suspected incident is recorded and tracked.
    • Serious incidents get a written review.
    • Security reports are acknowledged promptly.

  • Vendor management

    • Boards are told about a new subprocessor before it handles data.
    • Every subprocessor has a data processing agreement.
    • A provider we stop using is instructed to delete our data.

Subprocessors

The providers that process data for FTN. We publish a new one at least 30 days before it may handle data, and email each participating board.

Subprocessors, their purpose and where they process data
ProviderPurposeLocation
Environmental Systems Research Institute, Inc. (Esri)Maps and historical-location searchGlobal, including the United States
Google LLC (Firebase Authentication)Sign-in and account identityUnited States
Google LLC (Firebase Cloud Storage)Uploaded files and photosMontréal, Canada
Microsoft Corporation (Microsoft Entra ID)Board single sign-onThe board's Entra tenant region
Mistral AI (RCS Paris 952 418 325)Text extraction from uploaded documentsEuropean Union
OpenAI, L.L.C.AI model for the research checkUnited States
PlanetScale, Inc.Application databaseMontréal, Canada
PostHog, Inc.Product analyticsUnited States
Plus Five Five, Inc. (Resend)Transactional emailUnited States
AlphaAI Technologies Inc. (dba Tavily)Web search for the research checkUnited States
Vercel Inc.App hosting and the research check's runtimeUnited States

Read the full Subprocessor List for what each provider receives and the legal entity behind it.

Documents

The legal documents are public. The security policies are for school boards and reviewers: their titles and summaries are here, and an FTN administrator grants access to the full text.

Legal

Security policies

Already have access? Sign in

Frequently asked questions

Where is student data stored?

The database and uploaded files are stored in Montréal, Canada. Some providers process data outside Canada; the Subprocessor List names each one and where it processes data.

Who can see a student's work?

The student and the teachers of their class. Approved work shared on the platform does not identify the student unless the board permits it. Administrator access to user data is logged.

How is AI used?

After a student submits, an automated assistant checks historical claims and writes an evidence report for the teacher, who makes every decision. Students are told about the check before they submit. We do not use student work to train an AI model of our own.

How do we request deletion or an export of our data?

Write to . We delete a board's data when it asks or its contract ends, and provide an export of a board's or a student's data on request. Students, parents and guardians can also ask for work to be removed.

What happens if there is a breach?

We notify the affected board promptly, keep it updated and send a final written report. Where the law requires it, we also notify the affected people and the privacy commissioner.

Is FTN SOC 2 certified?

No. Our security policies are written to the SOC 2 framework. Request access to read them in full.

How do we get the full security policies?

Use Request access on this page, or email from your board or organisation. Once access is granted, sign in to read every policy here.

Contact

  • Security

    Report a vulnerability or incident, or ask for access to the security policies.

  • Privacy

    Reach our Privacy Officer about personal information, deletion, exports or a complaint.