Padlet
At a glance
A web-based collaborative board tool that allows teachers and students to post text, images, links, and multimedia content to shared digital notice boards, used across subjects for brainstorming, discussion, and resource sharing.
Administrative details
Illustrative admin fields — real values load from contracts / vendor records in production.
Round 1 · Privacy Triage
All 9 mandatory gates clean; privacy score 95.0% (Best). Confident to use on the strength of the public privacy policy — Round 2 not required. Scope note: 1 question(s) in the current rubric were not assessed in this run — Q19 (Data Security). The evidence predates them, so they are excluded from the 95.0% rather than scored as silence. Re-run the extractor to close the gap.
Round 2 · Vendor-supplied documents
What the vendor sent you — a data-processing agreement, a completed security questionnaire, a SOC 2 or ISO summary, a contract. Stored with this record. Every re-vet and every Drift Sentinel scan reads these first, ahead of the public pages, and quotes from them carry evidence tier T2 (contractual) instead of T3 (public claim).
…or paste the document text
Safeguarding summary
Advisory: Insufficient Evidence — Round 2 Required. No security risks were identified, but the reviewed source(s) don't document enough to clear this vendor: 4 domain(s) have no evidence and the rest are self-asserted (unverified). This is NOT a finding that the vendor is risky — it means we can't yet confirm they're safe. Request the documents below (SOC 2 / ISO 27001 / DPA / completed questionnaire), then re-assess.
Low apparent risk but thinly evidenced — pilot pending Round 2.