Scope of Services
What Bright Presence Digital builds, hosts, and is responsible for, and what your school owns.
Last updated: April 2026.
What Bright Presence Digital does
- Designs and builds your school's public website on our platform
- Hosts and maintains the site (uptime, security patching, backups)
- Provides a content-management system for school staff to edit pages, news, calendar, menus, and more
- Delivers an accessibility-ready platform & default templates (WCAG 2.1 AA-supportive baseline)
- Provides first-party, privacy-respecting analytics
- Offers a single inquiry / tour / contact form routed to the admissions office
What we deliberately don't do
- We do not store, process, or access student records (grades, attendance, transcripts, disciplinary records)
- We do not handle tuition payments or credit card data. We link out to FACTS / TADS / Nelnet
- We do not process financial aid applications. We link out to SSS / FAST / Clarity
- We do not run admissions applications. We link out to Ravenna / Finalsite Admissions / Blackbaud Enrollment
- We do not host parent portals or student portals. We link out to Blackbaud / Veracross / Finalsite
- We do not make educational or Title IX determinations. Those remain with the school
Why we design it this way
Each of the functions we don't do is a specialist responsibility with its own regulatory exposure (FERPA, PCI-DSS, state student-privacy statutes). The right tool for each job is a specialist vendor the school chooses. Our job is to make the public website, the "front door," feel beautiful, perform well, stay compliant with accessibility and baseline privacy law, and link seamlessly to the specialist tools behind it.
What your school owns
- All content on the site (copy, photos, logos, lists)
- The relationship with families and students
- Compliance with FERPA, Title IX, state student-privacy laws, and accreditation requirements
- The agreements with your admissions / SIS / billing / financial aid vendors
What we both sign
A Services Agreement (platform + hosting + design) and a Data Processing Addendum (DPA) that covers:
- Our role as a service provider / processor, not a controller of your data
- The categories of sub-processors we use (commercial cloud hosting, CDN, typography, transactional email). Specific vendors are named in the DPA schedule and may be updated with advance notice
- Breach-notification commitments and timelines
- Deletion / return of your data at the end of the engagement
We disclose our sub-processor list in the DPA rather than on this public page. Standard practice among platform vendors, so that infrastructure choices remain a business matter between you and us.