Hi Amanda. Yes, we have. We are using SSO via Google for all logins. I believe it is all or nothing with the SSO setup, but it has been a few years since we set it up. We have all parents sign off on account creation and usage of 3rd party tools (like Membean) during the summer/start of the school year. Do you have another service or two that you SSO with to compare? I feel as though I see this language in many places. Happy to chat offline too (nmarchese@emmawillard.org).
Original Message:
Sent: 09-23-2024 03:32 PM
From: Amanda Berdeen
Subject: Membean: Is anyone using?
Thank you for this information Nick and I am thrilled to hear that you have been using Membean with success. You have hit the nail right on the head in that I am concerned about their 3rd Party vendors (relationships). Did you obtain consent from students' parents and/or legal guardians before starting the relationship with them? And are you using SSO via Google for your student logins?
I did receive and review their most recent SOC audit but for some reason I am stuck on the fact that they state they will not share any information except to companies that work on behalf of Membean to provide a service. Maybe, I'm reading too much into it.
Amanda
------------------------------
Amanda Berdeen
Richmond Montessori School
Henrico VA
Original Message:
Sent: 09-23-2024 11:24 AM
From: Nick Marchese
Subject: Membean: Is anyone using?
Hey Amanda. We are using Membean and have been for some time now. Some of this seems fairly straightforward to me, but I've been wrong in the past to miss something starring me in the face. Right before that in the PP it says "Membean will never give your information to, or share your information with, any third party except as detailed below..."
Are you specifically concerned about 3rd party vendors when you read "send the info to companies who work on behalf of Membean to provide a Service to you"? They have some more information later on about the types of service providers they engage with. If you are curious on which providers, I'm sure they will provide that to you. Happy to chat more.
------------------------------
Nick Marchese
Emma Willard School
Troy NY
Original Message:
Sent: 09-20-2024 03:38 PM
From: Amanda Berdeen
Subject: Membean: Is anyone using?
Hello everyone~
We are looking at using Membean and I wanted to see if anyone was else was using or had any issues or concerns enabling student SSO to access. I was looking over the security section on their website and was a bit concerned that they are using 3rd party vendors on their end that may result in them having access to our student accounts or infomation. That's if I am reading this correctly.
Membean will send personally identifiable information about you to other companies or people when:
• We have your consent, including, if you are under 13 (or 16, if applicable), the consent of your parent or legal guardian, to share the information;
• We need to share your information to provide the Services you have requested;
• We need to send the information to companies who work on behalf of Membean to provide a Service to you. (Unless we tell you differently, these
companies do not have any right to use the personally identifiable information we provide to them beyond what is necessary to assist us); or
• We respond to subpoenas, court orders, or legal process or find that your actions violate the Membean Terms of Service or any of our usage guidelines
for specific Services.
Anyone out there using and any security concerns from your experience? I look forward to hearing some feedback.
#General
#CybersafetyandDataSecurity
------------------------------
Amanda Berdeen
Richmond Montessori School
Henrico VA
------------------------------