Back to School Forms Request a Demo
Platform Solutions Security Pricing Request a Demo
For IT directors

A system you can approve without losing sleep.

You're the one who has to vet anything that touches student data. Back to School Forms was built with your evaluation in mind — here are the answers you need up front.

Student data, handled the way the law expects

We process student personally identifiable information under FERPA, and free & reduced eligibility data under the stricter confidentiality rules of the National School Lunch Act. We will review and sign your district's data-privacy agreement, including state and national DPAs, before any data moves.

FERPA-aligned data processing
NSLA confidentiality for F&R data
We sign your district / state / national DPA
The district owns its data, always

Access and identity

District staff sign in with Google, so staff access stays inside identity controls your district already runs. Parents use a username and password, and only someone holding one of your registration codes can create a parent account. Staff permissions are scoped to roles, and an audit log records changes, account creation, and administrative actions — with the user and IP address against each one.

Google sign-in for district staff
Role-based staff permissions
Audit log with user and IP on every action
Registration codes control who can create accounts

Data out, in the shape you need it

Families enter their own information once per household, and returning families bring last year’s answers forward. Completed forms come out as print-ready PDFs and CSV exports where staff pick the exact columns to map into the SIS — your staff make the update to the system of record, so nothing writes to your SIS without you.

Selectable-field CSV exports for your SIS
Household mailing and home addresses as separate columns
Print-ready PDF packets, per student or district-wide
No automated writes to your system of record

Hosting, encryption, and uptime

The platform runs in a secure, managed cloud environment with encryption in transit and at rest, per-district and platform-wide backups, and monitored uptime. Each district runs on its own subdomain with its own branding, scoped to its own data — district users only ever see their own families. Families connect through a standard browser — there's no app to deploy and no device footprint for your team to manage. Full detail lives on Security & Compliance.

Bring your security questionnaire.

We'll answer it on the call, and put anything you need in writing.

Request a Demo → Security & Compliance
Keep reading Security & Compliance → How it works → Free & Reduced Lunch →