Security & trust

Your course is yours.
We keep it that way.

When you upload your materials and your students do their work in Kova, that data belongs to you — and it's our job to protect it. Kova is built on Vercel and Supabase, the same production infrastructure trusted by thousands of companies, with encryption and strict access controls at every layer. Here's exactly how we handle it.

How we protect your data

Built to keep
your data safe.

🔒
Encrypted, always
Everything you and your students send travels over encrypted connections (TLS/HTTPS), and is encrypted at rest in the database. Your data is never sitting in the open.
🧱
Isolated by design
Row-level security is enforced on every request, so each account — professor, student, or TA — can only ever reach its own data. One class can never see another's.
📁
Your materials stay yours
You own everything you upload. We don't sell your data, and we don't share your course materials or your students' work with other customers.
🤖
Not training data
We don't use your private course materials or your students' work to train AI models. Your content is used to run your class — nothing else.
🔑
Protected access
Sign-in, sessions, and permissions run on Supabase Auth. Passwords are hashed, sessions are secured, and access is scoped to exactly who should have it.
🗑️
You're in control
Your data is yours to take with you or remove. Delete your account or your content whenever you want, and it's cleared from our systems.
A few promises

What we'll never do.

✕Sell your data, or your students' data, to anyone.
✕Use your private course materials or student work to train AI models.
✕Share one instructor's or institution's data with another.
✕Hold your data hostage — you can export or delete it at any time.
For institutions

Rolling out across
a department or campus?

Student records carry real obligations under laws like FERPA, and those obligations sit with your institution. We take that seriously: for institutional deployments we work directly with your IT and legal teams on the data-processing agreement, access controls, and single sign-on your institution requires — and we're happy to walk your reviewers through exactly how Kova stores and protects data.

If your team has a security questionnaire or specific requirements, send them our way and we'll work through them with you.

Questions about security?

We're glad to answer them — from a quick question to a full review. Reach out and we'll get you what you need.

Email us about security Talk to the team