Architecture matches school privacy expectations
Why the architecture matches school privacy expectations.
Remio does not require student accounts, does not collect email addresses, and does not phone home with usage data. Sessions are direct device-to-device with end-to-end encryption.
Most software a school deploys arrives with a privacy review attached: what data does the vendor collect, where is it stored, who has access, how is it deleted, how would a parent's request to inspect or erase that data be honored. The review is necessary because most software collects student data. Remio is unusual in that the review is short — there is no data to inspect, no email address to erase, no student name in any Remio database, no session content stored anywhere on Remio infrastructure.
The reason is architectural. Remio does not have a user account system. There is no signup flow. The way a student connects to a workstation is by entering a 4-digit PIN that the workstation displays on its screen when the lab admin asks it to. The two devices exchange ephemeral encryption keys through Remio's introduction server, then connect directly to each other. From that point forward, the session content — the desktop video, the keystrokes, the mouse movements, the audio — travels between the student device and the workstation, and not through Remio. Remio is not in the path.
The practical implication is that Remio cannot leak student data because Remio does not have student data. There is no database of student emails. There is no log of what apps a student opened on what workstation. There is no recording of session content. A parent request to see "everything you have about my child" would honestly return an empty set. A FERPA-style data inventory of school-vendor relationships typically does not need to include Remio, because Remio is not a data processor of student information — it is closer to the role of a network cable, ferrying bits between two endpoints that have already encrypted them.
There is no such thing as a FERPA-certified product, or a COPPA-certified product, or a HIPAA-certified product. Those are regulations that apply to deployments, not labels that ship on software. What Remio offers is an architecture that makes a compliance review short and a deployment that fits cleanly inside the school's existing data-flow inventory. Every school should still have its own counsel confirm that fit — that is what counsel is for — but the conversation tends to be brief.
For schools that do collect telemetry from other vendors and want to verify what Remio sends, the answer is short: pairing handshakes (a 4-digit code, a public key, no identity) and presence pings (a workstation is online or not). That is the entire wire footprint of the introduction server. The session content itself never reaches Remio. Schools that want to inspect this with their own packet capture are welcome to.