Privacy compliance for student score's data

[itselavia]

In the United States, a student's academic record falls under protection from Family Educational Rights and Privacy Act, which mandates restricted access to a student's academic record.
Since GoSAT is proposing to store the student's data who is going to use this service, what security architecture is in place (like encryption, access control) to handle the data in a legally sound manner?