// Trust & Security Report
Quill.org (Quill Learning Foundation, Inc.)
AI-powered writing and grammar instruction platform for K-12 education, including tools for sentence combining (Quill Connect), reading comprehension with evidence-based writing (Quill Reading for Evidence), grammar diagnostics, proofreading, and whole-class lessons.
Certifications held
4
Maturity
Enterprise
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on quill.org“Quill is proud to receive a 92% privacy rating by Common Sense Education, meaning it meets high standards for data protection and follows best practices for student privacy.”
Verify on quill.org“Quill operates as a 'School Official' under FERPA, using student information 'only for authorized educational purposes as directed by the School'... Schools manage student data deletion through their partnerships team.”
Verify on quill.org“For children under 13, Quill relies on schools to provide parental consent for information collection for educational purposes. Schools must 'obtain any consents required from Parents' and provide appropriate disclosures regarding student data use.”
Verify on quill.org“Users have rights to: access and data portability, rectification of inaccurate information, erasure under certain conditions, processing restrictions, objection to processing, and consent withdrawal. Users may also lodge complaints with relevant supervisory authorities.”
> Show 4 unconfirmed / not-held certifications
source: quill.orgNo public evidence of SOC 2 certification found on vendor domain or dedicated security documentation.
source: quill.orgNo public evidence of ISO 27001 certification found on vendor domain or dedicated security documentation.
source: quill.orgNot applicable. Quill.org is an educational platform; HIPAA applies to covered healthcare entities and business associates only.
source: quill.orgNo public evidence of PCI DSS certification. While Quill.org accepts payments via Stripe (PCI-compliant processor), there is no indication of direct PCI DSS certification for Quill itself.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Offered
Data region
United States (data stored, processed, and transmitted in US)
Quill de-identifies student data per FERPA before any AI model development. Training datasets are built by educators (40-100 student response examples paired with educator feedback per writing prompt), not from raw student records. The vendor explicitly states: 'Before using education records for AI development, Quill removes identifiers so the remaining information cannot reasonably be used to identify an individual student' per FERPA standards. Uses Google Gemini and OpenAI for AI processing, but only with de-identified data.
// Security controls
Encryption in Transit
Data encrypted during transmission over public Internet using SSL/TLS (secure socket layer or similar technologies)
quill.orgAccess Controls & Authentication
SSO (single sign-on) and secure rostering to ensure only authorized members can access; secure rostering integrations with Google Classroom and Clever
quill.orgRegular Security Audits & Monitoring
Security infrastructure continuously monitored and regularly audited
quill.orgNo Data Sales
Explicitly stated: 'We do not sell your personal information to third parties' and 'We will never sell Student Personal Data.'
quill.orgNo Targeted Advertising
Ad-free learning environment; no tracking cookies; no targeted ads based on user activity
quill.orgIncident Response
Incident response procedures documented; data processing agreements with vendors required
quill.orgThird-Party Processors (Subprocessors)
Cloud: AWS, Google, Heroku, Azure Cognitive Services. AI: Google Gemini, OpenAI. Analytics: Google Analytics, Ortto. Support: Intercom, Vitally. Other: Stripe (payments), SendGrid (email), Inspectlet (analytics). All contractually obligated to maintain security and confidentiality.
support.quill.org// Products & data scope
data: Student reading progress, nonfiction text comprehension, writing responses, AI-powered feedback interactions
AI-powered writing prompts paired with nonfiction texts to enable deeper thinking and evidence-based writing
data: Student sentence responses, combining exercises, instant feedback data
Evidence-based strategy of sentence combining; students combine multiple ideas into single sentences
data: Interactive slides, class responses, writing prompts, discussion participation
Teachers control interactive slides; entire class responds to prompts; includes lesson plans and follow-up activities
data: Diagnostic test results, skill performance data, learning plan data
Determines which skills students need; generates personalized learning plans; includes ELL translations (16 languages)
data: Passage editing data, error identification, corrective feedback
Students proofread 150+ expository passages; receive personalized exercises based on results
data: Grammar exercise responses, error tracking, sentence writing data
250+ sentence writing activities covering comma placement, parallel structure, and other grammar concepts
// What to watch
- No SOC 2 or ISO 27001 certifications publicly documented (typical for educational nonprofits, but worth noting for enterprise requirements)
- Data processing in US only may create GDPR compliance concerns for non-US residents outside US jurisdiction
- Data Processing Agreement (DPA) is available but requires manual request to partnerships team (not included in standard Terms of Service)
- Uses third-party AI services (Google Gemini, OpenAI) for AI-powered feedback; verify data flow and data processing terms with AI vendors
- No public evidence of formal ISO 27701 (Privacy Extension) or ISO 42001 (AI Governance) certifications, despite strong documented ethical AI practices
// At a glance
Pricing model
Freemium (free tier for core tools; Quill Premium for advanced reporting, school-wide data integration, district-level features)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Quill.org (Quill Learning Foundation, Inc.)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
quill.org