Scope of Services
What Bright Presence Digital builds, hosts, and is responsible for — and what your school owns.
Last updated: April 2026.
What Bright Presence Digital does
- Designs and builds your school's public website on our platform
- Hosts and maintains the site (uptime, security patching, backups)
- Provides a content-management system for school staff to edit pages, news, calendar, menus, and more
- Delivers an accessibility-ready platform & default templates (WCAG 2.1 AA-supportive baseline)
- Provides first-party, privacy-respecting analytics
- Offers a single inquiry / tour / contact form routed to the admissions office
What we deliberately don't do
- We do not store, process, or access student records (grades, attendance, transcripts, disciplinary records)
- We do not handle tuition payments or credit card data — we link out to FACTS / TADS / Nelnet
- We do not process financial aid applications — we link out to SSS / FAST / Clarity
- We do not run admissions applications — we link out to Ravenna / Finalsite Admissions / Blackbaud Enrollment
- We do not host parent portals or student portals — we link out to Blackbaud / Veracross / Finalsite
- We do not make educational or Title IX determinations — those remain with the school
Why we design it this way
Each of the functions we don't do is a specialist responsibility with its own regulatory exposure (FERPA, PCI-DSS, state student-privacy statutes). The right tool for each job is a specialist vendor the school chooses. Our job is to make the public website — the "front door" — feel beautiful, perform well, stay compliant with accessibility and baseline privacy law, and link seamlessly to the specialist tools behind it.
What your school owns
- All content on the site (copy, photos, logos, lists)
- The relationship with families and students
- Compliance with FERPA, Title IX, state student-privacy laws, and accreditation requirements
- The agreements with your admissions / SIS / billing / financial aid vendors
What we both sign
A Services Agreement (platform + hosting + design) and a Data Processing Addendum (DPA) that covers:
- Our role as a service provider / processor — not a controller of your data
- The categories of sub-processors we use (commercial cloud hosting, CDN, typography, transactional email) — specific vendors are named in the DPA schedule and may be updated with advance notice
- Breach-notification commitments and timelines
- Deletion / return of your data at the end of the engagement
We disclose our sub-processor list in the DPA rather than on this public page — standard practice among platform vendors so that infrastructure choices remain a business matter between you and us.