NSPA offline edition · Manual review

PROTECT privacy review worksheet

Use the seven PROTECT categories to examine a tool’s published privacy and security documents. Record evidence and unanswered questions before your organization decides what is suitable.

Adapted from the school-oriented PROTECT Rubric v2.0 in mglearn/tcea. Check how each category applies to your scholarship program and applicant ages. This worksheet does not determine legal compliance or grant approval. No keyword scoring or AI service is used.

Use public vendor documentation or fictional examples here. All work stays in this browser. Export JSON to keep an editable copy; import it to continue later. Text and CSV exports and browser Print / Save as PDF work offline. DOCX and image export are not included in this manual edition.

Restore a saved review

Review details

Vendor or toolReviewer or roleReview dateDocuments reviewed and their dates

Choose a rating only after reviewing evidence

0: absent, vague, or contradictory. 1: partly addressed, with material gaps. 2: clear, specific, and verifiable. Leave an item not reviewed when you have not assessed it, or mark not applicable and explain why.

P · Parental Rights and Access

What process lets applicants access or correct information, request deletion, or obtain a copy? Who handles requests, on what timeline, and how are applicable parent or guardian rights handled?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

R · Retention and Deletion

What is kept, for how long, and for what purpose? What happens at account closure or contract termination, including backups and copies held by others?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

O · Opt-Out Options

Can people decline optional uses? What do the terms say about advertising, sale or sharing, profiling, and using submitted information to train models?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

T · Transparency

Which information is collected, why, where is it hosted, and which other organizations receive it? How are people told about material policy changes?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

E · Encryption and Security

What documentation describes encryption, access controls, incident handling, and independent security review? Which claims still need confirmation?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

C · Consent and Age Restrictions

How does the tool handle the ages and consent requirements relevant to your program? Who must approve use, and what alternatives exist when approval is absent?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

T · Third-party Management

Which subcontractors or service providers receive information? What restrictions follow the data, and how are changes, objections, and deletion requests handled?

Your ratingEvidence and source locationGaps, questions, or reason this does not apply

Human review and next steps

A total is only a summary of the ratings you entered. It does not authorize use. Record unresolved questions, the decision owner, and any required review.

Conditions and open questionsDecision owner and next actionDate and reason to review again

Source for later reference: mglearn.github.io/tcea/protect_rubric_v2/ · Categories retained; questions and scoring presentation adapted for a manual NSPA worksheet. Source snapshot: September 24, 2026.