Security + Safety Commitment

As parents’ expectations for digital conveniences grow, we have developed tools that use a parent’s email address for security and ease. When you share parent email addresses with us, you can expect:

• Strict privacy policies: Unlike other companies, we will NEVER sell or share parent information with anyone.

• Secure connection between student and parent: This allows quick retrieval of Order Codes—with less calls or emails to the school required.

• Data purging: We follow annual security protocols to remove school-provided data from our Google Drives and inboxes.

• Complete transparency: Visit our Privacy Policy page that has been approved by the Student Pledge Organization at inter-state.com/privacy.

What is student data used for?

We provide student and staff pictures, yearbooks, ID cards, banners, posters, classroom composites, certificates, stickers and other related items.

How is confidential data protected?

• We maintain a secure internal network perimeter and conduct monthly penetration tests to ensure our safeguards are reliable.

• We have 24/7 real-time monitoring on nearly 700 network devices by an external cybersecurity firm to detect any unusual or unauthorized activity.

• Password protection and two-factor authentication to prevent unauthorized access.

How is confidential data transmitted?

• TLS encryption for secure online transmission.

• An internal network protected from external threats through modern anti-virus software, a hardware firewall, and an application layer firewall

• VPN with two-factor authentication for secure remote access.

• Encrypted field laptops with remote-wipe technology.

Are employees trained in data protection?

We provide training through formal education, monthly security training videos and tests.

How can parents request data changes?

Parents can review, correct or request deletion of their data or images with school-approved verification. However, for requests that do not impact school-related items or services, parents can request data changes by contacting us directly at issnet@inter-state.com.

What happens to student data when a contract ends?

We delete school photos after fulfilling our contractual obligations—typically three years—unless a parent makes a purchase.

Does Inter-State Studio comply with national security standards?

Yes, we adhere to the CMMC cybersecurity framework developed by the Department of Defense. CMMC evaluates both a company’s implementation of cybersecurity practices and its maturity processes.

We understand sharing sensitive data on behalf of your school’s parents is a significant responsibility. At Inter-State Studio, we prioritize email safety and respect, ensuring the protection of personal information, maintaining secure data and fostering clear, trustworthy communication between Inter-State Studio, schools and parents.

• Permission-based communication: All newly provided parent email addresses receive a welcome email from Inter-State Studio with an opt-out option before further communications. Schools can streamline this process by directing parents to our website to opt out before schools submit their email list. Those who opt out in advance will not receive the welcome email.

• Email data protection: We follow annual security protocols to remove school-provided data from our Google Drives and inboxes.

We take a sincere interest in keeping your school a safe place to learn. Our photographers are given comprehensive training to ensure they capture great smiles in a professional manner. 

• Our strict No-Touch Posing Policy is reinforced through mandatory training sessions and instructional videos.

• All employees go through an extensive hiring process, including an extended criminal background check. We also utilize E-Verify to confirm employment eligibility.

• Our Photographers complete over 80 hours of training each year to ensure the safety of your student body.