Privacy and security
with Promethean solutions
Our customers’ trust is foundational to who Promethean is as a company.
From protecting personal data and data privacy to ensuring customers have the ability to keep their own data safe when using our products, Promethean takes your privacy and the security of your personal information very seriously.
Data privacy and security is a top priority
Promethean maintains comprehensive privacy practices and employs multiple security measures to keep personal data safe. We intentionally minimize the user’s personal data collected through our products and services, and we do not sell any personal information to third parties.
Protecting student data and privacy
When it comes to students, personal data is only collected when a school, district, or teacher has contracted with us and authorized our collection or processing of student personal information, and in these cases, only limited student personal data is collected.
To abide by applicable privacy laws, Promethean often enters into student data privacy processing agreements with schools, school districts, or municipalities that limit use of student data and include Promethean’s commitment to implementing appropriate physical and technical measures to secure student personal data.
In addition, Promethean is a signatory to the Future of Privacy Forum’s and Software and Information Industry Association’s Student Privacy Pledge, a pledge that demonstrates Promethean’s commitment to safeguarding student privacy in Promethean’s collection, maintenance, and use of student personal information.
Data processing with industry best practices
Promethean follows privacy laws and regulations applicable around the world, and our solutions comply with regulatory standards, including, where applicable, the Children’s Online Privacy Protection Act (COPPA), the Federal Education Rights and Privacy Act (FERPA), and the General Data Protection Regulation (GDPR).
All user personal data processed by Promethean or transmitted between user devices to Promethean is encrypted using strong cryptographic methods to encrypt data in transit and at rest. In addition, Promethean has professionals dedicated to system security and the protection of information collected and processed.
Security is built into our hardware products and our software services
To help users secure their ActivPanel, to maintain compliance with applicable laws and regulations, and to remediate threats to Promethean hardware and software users, Promethean has adopted multiple practices through the entire development and lifecycle process of our products and services.
For our software services, we use a Secure Software Development Lifecycle (SSDLC) to bring our software services to market, and we have multiple security evaluation checkpoints built into this process, including Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST). Our software services are also subjected to periodic third-party penetration testing.
To sign into an account within a Promethean service, users are required to establish their access credentials. For greater security, Promethean offers users the option to leverage existing Identity Providers to verify a user’s identity. This option further limits the personal data necessary for Promethean to collect and process for a user to maintain and access an account with a Promethean service.
Security enhancements help keep data and content safe
The Promethean account service, designed to support use of the ActivPanel products, supports multiple, secure sign-in methods, including through an existing Google or Microsoft account, scanning a QR code, or using the Promethean app on a mobile device.
The Promethean account service, when used with ActivPanel 9 Premium and ActivPanel 9 Pro offers additional secure sign-in options, including tapping an NFC card.
With Single Sign On (SSO), users can authenticate on a connected computing device and to an ActivPanel simultaneously, and with Cloud Connect, can save content securely to OneDrive or Google Drive. Signing in from another device gives users greater privacy, keeping credentials away from students’ eyes. Users can also access some features like the screen lock PIN from their individual Promethean account within the Promethean account service for enhanced security, increased self-service, and a deeper level of personalization.
For IT administrators, remote panel management supports fleet-wide security and system updates for rapid response to security concerns and upgrades.
Flexibility and versatility make following security measures easy
ActivPanel LX is not a networked client and is always used with a computing module, such as a Chromebox, OPS-A, and OPS-M. Therefore, users simply use the security protocols and authentication methods of the computing device and manage security at the device level.
Users can also use the security methods of third parties such as Microsoft and Google for a seamless fit within their existing technology ecosystem.
No digital footprint is established on the ActivPanel LX, so no personal information is saved to or retained on it. And with no built-in operating system, no panel updates are needed.
