Online safety and data privacy
Peace of mind for millions of educators
Your security, safety, and privacy are our top priorities
As the home to more than 7 million educators worldwide, TPT is dedicated to creating a safe place for our users to share resources securely. TPT’s rigorous security policies mean that educators can use resources from our site with full peace of mind.
How TPT protects you against cybersecurity threats
We take our responsibility to provide a safe and secure website for educators very seriously. Learn more about the safeguards TPT has in place to ensure that educators and schools are kept safe.
TPT scans every resource with industry-best virus and malware detection
Here’s what we do to keep our website — and the content on it — safe:
- Every file available is scanned at upload.
- Flagged files are quarantined and never made available.
- Files are periodically scanned after upload.
- Files are disabled if issues are discovered or reported.
TPT undergoes regular vulnerability scanning
TPT’s website undergoes automated vulnerability scanning performed by a qualified third party on a regular basis. These scans check for any known vulnerabilities or misconfigurations that may be exploitable or may pose a threat to site security.
TPT conducts regular penetration tests led by industry experts
TPT works with experienced, independent penetration testers to deeply review our codebase and applications for cybersecurity issues or vulnerabilities at least once a year. We review all results as a team, document them and prioritize anything discovered according to severity and exploitability. We urgently remediate any critical vulnerabilities to online safety.
TPT has 24/7 intrusion detection monitoring
To protect the website and maintain a safe online experience for users, TPT engages an industry-leading provider for support to continuously monitor for suspicious activity across our network and hosts.
TPT encrypts data
To ensure online safety, all web traffic to TPT is secured with HTTPS using TLS 1.2 or higher. Qualys’ SSL Labs can be used to verify the security of technologies in use, and you can always find our results here. We use AWS industry leading cloud services platform and our default configuration is to use encryption at rest.
TPT is protected by a web application firewall
In addition to securely configuring our production networks to only allow traffic from trusted sources, TPT deploys a Web Application Firewall (WAF) in front of our web applications to protect against attack traffic such as SQL Injection, XSS, DDoS and other common attacks.
TPT requires employee training quarterly
In order to ensure we’re able to provide a safe online experience for users, all TPT employees undergo security and privacy awareness training annually, and as part of this commitment, all engineers working on our website also go through secure coding training. This training helps ensure we incorporate the most up-to-date cybersecurity practices into our products in order to protect our users.
TPT is assessed against trusted frameworks
TPT is annually assessed as a PCI-DSS Level 1 Merchant by a Qualified Security Assessor (QSA) and commits to maintaining compliance with PCI requirements. TPT also performs at least annual internal security assessments to identify and prioritize improvements to our security program.
How TPT manages user and data privacy
At TPT, user and data privacy are important to us and ingrained in our practices (we are an ad-free website). Learn more in our Privacy Center.
TPT provides transparency through our privacy policy
TPT’s Privacy Policy provides transparent details about our data privacy practices. To highlight a few key details from the data privacy policy: we do not sell the data of our users, and have invested in tools to make it easy for users to exercise greater control over their data as provided under applicable laws.
TPT offers data processing agreements
As part of our data privacy and security efforts, TPT routinely enters into Data Processing Agreements (DPAs) with schools and districts around the U.S. We have developed a standard DPA as well as a version specifically geared towards the requirements of NY Ed Law 2d which we offer to any school that requests it. If you’d like to get a DPA in place with TPT, please reach out to [email protected].
A high standard for privacy and security
TrustEd Apps Certified
TPT is proud to be a member of the IMS Global community. We've earned the TrustEd Apps Certification for Data Privacy recognizing that our service meets the IMS Global standards for the protection of student data.
Frequently asked questions about TPT’s security
How do I know that TPT is safe and secure?
TPT provides a safe and secure website for educators by (1) scanning every resource with industry-best virus and malware detection software, (2) undergoing regular checks for cybersecurity issues or vulnerabilities, (3) monitoring for suspicious activity across our networks and hosts 24/7, and (4) encrypting data and all web traffic with HTTPS using TLS 1.2 or higher.
TPT’s security measures exceed industry standards, and we’re proud to be recognized by independent third party experts.
TPT’s security measures exceed industry standards, and we’re proud to be recognized by independent third party experts.
Does TPT contain advertisements that might have spam or malware?
TPT does not host third-party ads on our website.
How often does TPT scan resources listed on TPT for malware or viruses?
Every resource available on TPT is scanned for viruses and malware at the time of upload. If files are flagged on upload, they are quarantined and never made available. After upload, files are scanned periodically to ensure that the site remains safe and secure.
How does TPT safely monitor for scam or spam stores?
TPT maintains store registration safeguards to prevent the creation of fraudulent accounts. The activity of all stores is monitored through automatic alerts and community reports.
What should I do if I think I receive a virus or malware from TPT?
To report security concerns involving our products, please contact our Customer Support team at [email protected]. Please include as much detail as possible, including the nature of the incident, any affected systems or data, and the steps taken leading up to the incident. Our team will forward your report to our U.S.-based Security team, where it will promptly be investigated to determine what action is necessary.
Have questions or concerns about online safety and data protection at TPT?
We welcome the opportunity to speak with you about how we keep our users and their networks safe. If you have a question or concern, reach out to us at [email protected]. Every reported issue is promptly investigated by our U.S.-based team of experts to determine what action is necessary.
TPT is the largest marketplace for PreK-12 resources, powered by a community of educators.
IXL family of brands