Security based on NIST 800-53 Rev. 5 / FISMA and FERPA frameworks. Annual security assessments and penetration tests are performed by an independent third-party company.