[ineedasername]

We have extremely stringent security checklists for 3rd part vendors, as I alluded to in my post. Both the vendors, and any of the vendor's vendors, must be able to demonstrate that data is not used for any purpose but the school's. As for attendance, automated attendance tracking has been around for decades in the form of swipe cards, and simply automated a process professors undertook manually. No data is captured that would not have been in the analog world, and professors are still free to have no attendance policies at all schools I have spoken to about it. Granted, that may only be a sample size of 100 or so.