What Compass does with what you ask.
Written for students, parents and SMU's IT office. Where something is still being built, this page says so.
The short version.
Your chats are yours
They're locked to your account. Advisors can't read them, and neither can other students.
Your profile is optional
Add your major and interests for sharper answers, or leave them blank. Change or clear them any time.
It can't see your records
Compass has no access to your grades, Canvas, PeopleSoft or your SMU email.
Models that keep data get refused.
Any model without a zero-retention agreement is blocked at the gateway, so the request fails before a provider ever sees it.
Checks run on 5 November 2026. The second set sent no flag at all, so those refusals come from the account-wide setting alone.
Every control, and where it stands.
Live means it protects students today. The rest is labelled honestly.
Per-student isolation
Row-level security on every table. A student reads only their own data.
Cite or refuse
Answers link to the SMU source they came from. Low confidence means no answer and a pointer to the right office.
Zero data retention
Every answer-generating model call goes through US providers that keep nothing.
Minimal personal data
Only what the student types into their profile. No institutional systems.
Visible audit trail
Each answer shows its steps, its sources, the model that served it and that ZDR was on.
Isolated execution
Files and code run in a short-lived sandbox that can't reach Compass's databases.
One ZDR route for everything
Search embeddings and the routing classifier move onto the same enforced route.
Fixed trace retention
A retention period agreed with OIT, applied to traces and logs.
HECVAT
The higher-ed vendor security assessment, for SMU's review.
What Compass keeps.
- Your name and SMU email, to sign you in
- Your chats and any feedback you leave, so you can pick up where you left off
- Profile details you add: school, major, minor, graduation date and catalog year. A student ID is optional.
- Files you attach to a chat
- How the app gets used, plus basic device details like browser and IP address, to keep it running and improve it
What it never does.
- Send email or act on a student's behalf
- Read student records in SMU systems
- Let model providers keep or train on questions
- Decide anything about aid, standing or exceptions
The full details are in the privacy policy and terms of service. To see, correct or delete your data, email hello@infosavvyai.com.
Questions from SMU's IT or legal teams?
We'll send the architecture brief and walk through anything on this page.
EMAIL THE TEAM