This page describes where Pearl Education stores and processes Customer Content, including Student Data, and the protections applied to it.

Where Your Data Is Hosted

Pearl hosts all data in Amazon Web Services (AWS) US regions only. The primary region is AWS us-east-1, with us-west-1 as the disaster-recovery region. We do not store Customer Content outside the United States.

US Data Residency

Customer Content, including Student Data, is stored and processed in the United States regardless of where an authorized user accesses the Products. Pearl’s services are directed to US customers.

Encryption

Customer Content is encrypted in transit using TLS and at rest using AES-256 (MSA §4.3; DPA §6.2).

Environment Separation

Pearl maintains separate development, test, and production environments. The Products are multi-tenant, with logical isolation between customers enforced through application-level role-based access controls (RBAC). Pearl follows a secure software development lifecycle as part of its security program (DPA §6.2).

Backups and Disaster Recovery

Disaster-recovery backup copies are retained only in encrypted backups, are used only for disaster recovery, and are automatically overwritten on a rolling schedule not to exceed seven (7) days (MSA §4.6; DPA §8.3). See the Business Continuity and Disaster Recovery page for recovery objectives (RTO) and backup detail.

Service Status

Current service availability is published at https://pearl.statuspage.io/.

Retention and Deletion

Customer Content can be exported during the Service Period and for thirty (30) days after termination, and is deleted no later than sixty (60) days after that export period, with written certification of deletion on request (MSA §4.6; DPA Art. VIII). See the data-lifecycle pages for full detail.