Hi Patrick.  Thanks for the PowerUp on deleting uploaded documents.  On a related subject, is there any documentation regarding the document upload feature in Enrollment that speaks to the secure retention of documents?  In a soon to be released application form, we are going to request a document upload from families and wanted to include in our instructions that they can be assured that these documents are safe and secure.  A note that we will add is that once this application period is complete and we have reviewed their documents, we will delete them utlizing this new available feature.    

Documents are uploaded to form submissions either by parents or school/district administrators. Uploaded files are transferred to Enrollment servers via HTTPs, where a GUID is assigned and stored in the form submission data, and the blob data corresponding to the file is sent to an Azure Storage Container with the GUID as its identifier. This transfer of blob data to Azure is performed with a Microsoft .NET library using SSL encryption. This Microsoft .NET library uses a private set of credentials to authenticate to the storage account for all upload/download operations. The blob data is encrypted at rest in Azure by Microsoft.

No end users are able to access the Azure Storage Containers directly. Only Enrollment Engineering and CloudOps engineers with the appropriate access levels and controls are able to access the Azure Storage Containers for infrastructure implementation, maintenance, and troubleshooting purposes. Enrollment Engineering and CloudOps engineers’ access to the Azure Storage Containers is through PowerSchool’s Azure Active Directory which requires MFA authentication.

Documents can be downloaded by school/district administrators. Documents are grouped by type/purpose within each form. Access to document types is controlled at a permission profile level and permission profiles are assigned to school/district administrators on a form by form basis, allowing districts to control what users have access to what document types per form. IDOR protections applied within the Enrollment application prevent unauthorized access to the backend document retrieval calls. Downloaded files are retrieved from Azure via the same Microsoft .NET library using SSL encryption and are sent directly to the requesting client browser. The downloaded files sent to the browser are not cached.