Privacy Policy Third-Party Contractors

Consistent with the NWEA Privacy Policy Assessment System, NWEA may share Student Education Records, as defined in the Master Subscription Agreement between the parties, with third-party contractors to support the Assessment System. NWEA utilizes a cyber supply chain risk management (SCRM) process for third parties.  The primary objective of the cyber SCRM is to identify and assess external parties to ensure they meet our security profile (based on NIST security controls). As a part of this process, third parties are contractually committed to protect the availability, confidentiality, and integrity of Student Education Records. Third parties are prohibited from engaging in targeting advertising and any other use except in support of the Assessment System.  Current third parties that may have access to Student Education Records include: 

 

Name of Third Party Contractor	Location	Services	Access
Hitachi Consulting Corporation	Dallas, Texas	Software development	Access to NWEA systems based in the US that contain Student Education Records.
Amazon Web Services	Seattle, Washington	Data center services (US West and East locations)	Physical devices storing Student Education Records. No access to Student Education Records.
Flexential	Portland, Oregon and Salt Lake City, Utah	Data center services	Physical devices storing Student Education Records. No access to Student Education Records.
Technology Conservation Group, Inc.	Portland, Oregon	IT asset disposition	Secure media sanitization services.
Advanced Technology Recycling	Salt Lake City, Utah	IT Asset Disposition	Secure media sanitization services.
LanguaMetrics, LLC and VIMAS Group International, Inc.	Odessa, Florida	Software development	Access to NWEA systems based on the US that contain Student Education Records.
PartnerHero North America	Boise, Idaho	Technical support	Access to NWEA systems based on the US that contain Student Education Records.
Manpower Group	Milwaukee, Wisconsin	Technical support	Access to NWEA systems based on the US that contain Student Education Records.
Caveon, Inc.	Midvale, Utah	Test security forensic services	Access to Student Education Records under limited circumstances.
Atlassian Corporation	San Francisco, California	Project and issue tracking software	Stores limited Student Education Records.
Microsoft Corporation	Redmond, Washington	Software services	Stores Student Education Records.
Snowflake, Inc.	Bozeman, Montana	Software services	Stores Student Education Records.

Document Effective Date: May 2, 2024

 

Last Modified: May 2, 2024