🛡️ SECURITY & TRUST

Built for Trust. Verified by Results.

Every platform in the NeuroEcosystem undergoes regular security scanning, role-based access control, and FERPA-aligned data practices — openly reported here.

All systems — 0 vulnerabilities as of May 17, 2026

Platform Status

Security Scan Results

Independent security scans run on each platform. Results are published here.

🌱

NeuroEco Global

neuroecoglobal.org

✅ Clean

Scanned May 17, 2026

Public-facing research, consulting, and family engagement platform.

Security measures applied:

✓Webhook authentication guard

✓Admin-only system status endpoint

✓AI agent input sanitization

✓Internal-only sync function guard

✓Lead capture AgentMessage write gate

🧠

Profe Neuro Plus

profeneuroplus.org

✅ Clean

Scanned May 16, 2026

AI-powered lesson planning and student assignment platform for K-9 educators.

Security measures applied:

✓Admin-only Microsoft 365 institutional consent

✓Google Classroom per-user OAuth isolation

✓FERPA-compliant data architecture

✓Assignment code generation (GCL / LICE)

✓Role-verified API endpoints

✍️

WriteMaster AI

writemasterai.app

✅ Clean

Scanned May 16, 2026

Student writing and project-based learning platform aligned with the NeuroEcosystem Model.

Security measures applied:

✓Hardcoded App ID migrated to environment variable

✓Admin auth guard on sensitive functions

✓FERPA-compliant student data handling

✓School-agnostic assignment pipeline

✓Stage-gated content delivery

Compliance & Standards

Our Commitments

🎓

FERPA Aligned

Student data handling follows FERPA guidelines for educational privacy.

🔐

Encrypted Secrets

All API keys and credentials are stored as encrypted environment variables — never in code.

🛡️

Role-Based Access

Admin, teacher, student, and public roles have distinct permission boundaries.

🔬

Regular Scanning

All platforms undergo routine automated security scans with public results.

🌐

OAuth 2.0 Integrations

Third-party connections (Google, Microsoft) use industry-standard OAuth 2.0 flows.

📋

Audit Logging

Sensitive system actions are logged with timestamps for accountability.

Audit Log

Recent Security Activity

A public record of security improvements, scans, and compliance milestones.

Scan

Full security scan — 0 issues found

NeuroEco Global · May 17, 2026

Hardening

5 backend functions hardened with auth guards

NeuroEco Global · May 17, 2026

Hardening

ElevenLabs webhook secured with shared secret

NeuroEco Global · May 17, 2026

Scan

Full security scan — 0 issues found

Profe Neuro Plus · May 16, 2026

Hardening

Microsoft 365 admin consent gated to admin role only

Profe Neuro Plus · May 16, 2026

Scan

Full security scan — 0 issues found

WriteMaster AI · May 16, 2026

Hardening

Hardcoded App ID moved to encrypted environment variable

WriteMaster AI · May 16, 2026

Feature

Google Classroom OAuth isolation implemented per-user

Profe Neuro Plus · May 16, 2026

Legal

NeuroEcosystem Model of Success copyright filed (USPTO)

All Platforms · Apr 26, 2026

Legal

NeuroEcosystem Institute 501(c)(3) filed — EIN 42-2050405

All Platforms · Apr 21, 2026

Questions about data privacy?

We're happy to walk school administrators, grant reviewers, or families through our security practices.

Book a Security Briefing View Access Plans