SumoApps, operates the services offered on
sumo.app (the "Sumo Apps Website"), including the Sumo Apps platform (the "Sumo Apps Platform"), and any associated mobile applications (the "Sumo Apps Apps") or products and services that Company may provide now or in the future (collectively, the "Service").
Protecting data privacy and security is a top priority for Sumo Apps. Our Privacy Policy and Student Data Privacy Addendum solidify the commitments that Sumo Apps and schools make to each other, including our security and privacy commitments. Capitalized terms not defined in this document, such as "Student Data", are defined in our Student Data Privacy Addendum. We regularly evaluate our policies and practices to improve security and to keep up with the latest practices of the security industry.
This document is designed to provide technical readers, such as Chief Information Officers or Chief Technology Officers at school districts, additional clarity and specifics about our security commitments. While this document is written for technology experts who often play a key role in assessing our policies, we recognize that data security is just as important to families, teachers, and students as it is to school officials. If you would like to find out more and access materials that are written to help you digest the more technical information, please reach out to our team at
sup...@sumo.app
(HTTP over TLS, also known as HTTPS) which encrypt all data before it leaves the Sumo Apps Service's servers and protects that data as it transits over the internet. All of our Services are in Amazon Web Services (AWS) and served from either Cloudfront or Elastic Load Balancer (ELB). We use HTTP Strict Transport Security to ensure that pages are loaded over HTTPS connections and our TLS configuration receives an A+ from Qualys SSL Labs.
Student Data is stored at our Service Provider, AWS, and the following applies to their technical and organizational measures. In addition, we secure decentralized data processing equipment and personal computers. All personally identifiable information is encrypted at rest using modern encryption algorithms. In AWS S3, we use AES256 with AWS managed keys, in Aurora (MySql) we use AES-256 with customer managed keys and in Redshift we use AES-256 with AWS managed keys. Additionally, we use MongoDB with AES-256 with keys managed by AWS..
The Sumo Apps Services use AWS, to host the infrastructure. AWS undergoes strict ongoing security assessments from external audit firms to ensure compliance with security standards including ISO 27001, SOC 2, PCI DSS Level 1, and FISMA. See for more details.
Network access to the Sumo Apps Services infrastructure is highly restricted. AWS hosted infrastructure resides in a dedicated Virtual Private Cloud (VPC) which is designed to ensure that only authorized traffic over approved ports is allowed. We use ThreatStack to monitor for suspicious activity.
We have a data backup and recovery capability that is designed to provide a timely restoration of the Sumo Apps Services, with minimal data loss, in the case of catastrophic failure. These backups are encrypted and stored in multiple availability zones. Additional technical and organizational measures to ensure that Student Data are protected against accidental destruction or loss (physical/logical) include:
Note: Student Data is stored at our Service Provider - currently AWS - and the above applies to their technical and organizational measures as well as any other relevantService Providers, such as MongoDB. In addition, we have a disaster recovery plan in place.
Technical and organizational measures to prevent unauthorized persons from gaining access to the data processing systems available in premises and facilities (including databases, application servers and related hardware), where Student Data are Processed*, include:
Access to the Sumo Apps Services infrastructure is highly restricted. We limit access to individuals who need access to do their jobs such as engineers, data scientists, product managers, and support personnel. All access to our infrastructure is logged. All access to our infrastructure requires the use of strong passwords and multifactor authentication.
Technical and organizational measures to ensure that persons entitled to use a data processing system gain access only to such Student Data in accordance with their access rights, and that Student Data cannot be read, copied, modified or deleted without authorization, include:
Technical and organizational measures to ensure that Student Data cannot be read, copied, modified or deleted without authorization during electronic transmission, transport or storage on storage media (manual or electronic), and that it can be verified to which companies or other legal entities Student Data are disclosed, include:
Sumopaint has web-based "paint" features similar in some respects to Pixlr.[4] It was originally created in 2008 by Sumo Limited.[5] Sumopaint has many of the same tools and features as Photoshop but is geared more towards illustration, whereas other software such as Photoshop is more suited for heavy image editing.[6][7] It has been used to teach students how to edit images.[8] Like Photoshop, it has layering capability, image adjustment tools such as changing the color balance, options for blending images, shadows and bevels, filters such as sharpening and blurring.[9]Reviewer Kris Fong of MacWorld magazine described some "quirkiness with certain tools and layers" and noted that it only works with certain file formats such as JPEG, PNG and GIF formats, and only allows users to save images in the JPEG and PNG formats,[9] as well as an internal file format called Sumo files.
There is a support community called
sumo.app with community features, such as uploading, commenting on, and rating images, which are accessible to those with accounts. There is a paid professional version of the software called Sumo Pro which activates features such as a downloadable version of the software.
Artists, from amateurs to pros, are starting to see the value in using tablets and phones to sketch, draw, and paint. What mobile devices sacrifice in tactility they make up for in flexibility: zoom for nailing fine details, huge color palettes, and tons of different options for pens and brushes. And of course, students can stuff them in their backpack just like a sketchpad. These awesome painting and drawing apps -- our current favorites -- are curated for both younger and older students. For young students, there are more stripped-down but highly engaging options that make art accessible via the freedom of gesture and touch-based interaction. For older students, there are pro-grade apps with deep customizability and functionality that will let them produce artwork perfect for their portfolio.
3a8082e126