Is Quizizz FERPA Compliant?

Quizizz, now operating as Wayground, cannot be "FERPA certified," because FERPA hands out no certificate to software vendors at all. Wayground states it complies with FERPA and will help school systems meet their obligations, and it offers a Data Processing Agreement a district can sign. That agreement, not the compliance wording on the page, is what actually supports a district's FERPA position, and the district stays the responsible party.

The rebrand adds a wrinkle worth catching early: a district whose file still says "Quizizz Inc." may be holding paperwork written before the product became Wayground. The legal question is unchanged, but the document that answers it deserves a fresh look.

Quick Answer: There is no FERPA certification for any vendor, so "Is Quizizz FERPA compliant?" resolves to whether your district has a current signed agreement with the company now called Wayground. Wayground states it complies with FERPA and helps education agencies meet their obligations, and it displays real third-party privacy marks (1EdTech TrustEd Apps, a Project Unicorn Pledge signature, Common Sense Privacy Verified). None of those is a FERPA seal, and no public evidence shows a confirmed FTC COPPA Safe Harbor either. The district remains accountable for the education records involved.

This article stays on FERPA specifically. For consent mechanics under the other main law, see Is Quizizz COPPA Compliant?; for the day-to-day setup levers a teacher controls, see Quizizz and Student Data Privacy: What Teachers Should Know. Here the focus is the school-official exception, where education records actually enter the platform, and why the rebrand makes a paperwork check overdue.

The Rebrand Changed the Name on the Contract, Not the Legal Question

Quizizz rebranded to Wayground during 2025, with the interface transition completing by early 2026, while Quizizz Inc. remained the legal parent entity and old quizizz.com links kept redirecting automatically. For FERPA, that means the obligations carried over untouched, because FERPA attaches to the operator and the school, not to the brand on the login screen.

The practical catch is documentary rather than legal. A signed DPA is only useful if it clearly governs the product a district is actually running today.

• Confirm the agreement still binds the current entity. A DPA naming "Quizizz Inc." can remain valid, but a district should verify that in writing rather than assume it.
• Update classroom-facing links from quizizz.com to wayground.com, since a mismatched link on a syllabus invites a parent question the district then has to field.
• Recheck any compliance summary written before the rebrand, because a screenshot from 2024 may describe pages that have since moved.

Families are already watching this space, which raises the cost of a stale document. Common Sense Media's 2025 family research found that 83% of parents said their child's school had not communicated with them about how classroom tools use student data at all (Common Sense Media, 2025). A rebrand nobody explained to families widens exactly that gap.

What FERPA Requires of a Quiz Platform Used Across K-9

FERPA gives parents and eligible students rights over education records and restricts when a school may disclose them, and it binds the district, not Wayground directly. A quiz platform enters the picture only through FERPA's "school official" exception at 34 CFR § 99.31(a)(1), the same doorway every classroom edtech tool uses.

A gamified quiz tool draws sharper FERPA attention than a tool used mostly with older teens, for one structural reason: it spans early elementary through high school, so a large share of its daily users are under 13 by design. That means education records tied to identifiable young students are common, not an edge case.

The school-official exception applies only when four conditions hold together:

1. Wayground performs a service the school would otherwise run itself.
2. The school keeps direct control over how the data is used and kept.
3. The data serves only the authorized purpose, not a separate commercial one.
4. Redisclosure is contractually barred without permission.

FERPA's teeth are unusual, which is worth knowing before treating the law as a light touch. Enforcement runs through the US Department of Education, the penalty is loss of federal funding, and there is no private right of action after Gonzaga University v. Doe, 536 U.S. 273 (2002). The district cannot hand that accountability to a vendor; it can only pick one whose contract lets the district meet its own duty.

Where Student Education Records Enter a Wayground Classroom

Whether Wayground handles a FERPA education record depends on how a class joins, and three of the four common entry points are adjustable. An education record is information directly tied to an identifiable student and maintained by the school or a party acting for it, so the join method decides the answer.

Guest Joining Usually Stays Below the Education-Record Line

A student can join a live game as a guest with only a nickname, no email and no stored account, which is the lowest-data option the platform offers. For a single review session, that guest activity generally does not create an education record, because nothing persistently ties a nickname to a named student in a maintained file.

Accounts and Roster Syncs Are Where Records Actually Enter

Persistent student accounts and roster syncs through Clever, ClassLink, or Google Classroom pull identifiable data into the platform automatically, and that data becomes an education record the district must manage. A parent or guardian email may also be collected in limited account-creation cases, according to the company's privacy materials.

Because a roster sync is provisioned upstream by an administrator, its FERPA coverage belongs to a district-level agreement, not a per-classroom choice. A teacher cannot quietly switch a synced class to guest-only joining without talking to whoever manages the integration.

Assignment mode also shapes how long a record lives, which is a FERPA retention question as much as a collection one. A one-off live game barely outlives the class period, but a graded homework assignment is built to persist as a durable per-student record. The FTC's 2025 COPPA amendments now expect vendors to keep children's data only as long as reasonably necessary under a published retention policy (FTC, 2025). A FERPA-minded district should hold its Wayground records to the same discipline: keep them while the instruction needs them, then delete on a schedule the district enforces rather than one the platform happens to default to.

What Wayground Actually Commits To on FERPA

Wayground states in its privacy materials that it complies with FERPA and COPPA and will work with an organization to meet relevant state and regional privacy commitments (Wayground, 2026). That is a first-party statement, real and worth reading, but not the same thing as an enforceable, district-specific contract.

The Data Processing Agreement Is the Enforceable Piece

The document that turns a stated commitment into something a district can hold Wayground to is a signed DPA, the same standard the pillar guide applies to every vendor in this category. For the fuller legal mechanics of that exception and how it can break down, see AI, FERPA & COPPA: The Complete School Data-Privacy Guide (2026).

A district relying on the privacy page alone is trusting language that can be revised without notice. A signed agreement fixes the terms for that district and gives a parent's follow-up question a clear, documented answer.

How FERPA Parental Rights Apply to a Wayground Classroom

FERPA gives parents and eligible students three concrete rights over education records, and a district using Wayground has to honor all three for the student data the platform stores. Those rights do not weaken because a record sits in a vendor's system instead of a filing cabinet.

Applied to a quiz platform, the three rights look like this:

• The right to inspect and review. A parent can ask to see the education records tied to their child, which for Wayground means the stored scores, attempt history, and account details for an identifiable student.
• The right to request amendment. A parent who believes a stored record is inaccurate or misleading can ask the school to correct it, and the district needs a workable path to act on that inside the platform.
• The right to control disclosure. The school generally needs consent before releasing personally identifiable information to a third party, which is precisely why the redisclosure bar written into the DPA carries weight.

Fulfilling an Access or Deletion Request

The real test is whether a district can actually act on one of those requests against Wayground data when a family makes it. A vendor's technical ability to export or delete a student's records is necessary but not sufficient; the district's own written procedure is what makes the right operational.

A short, workable process covers most cases:

1. Locate the records tied to the student across live-game results, self-paced practice, and any graded history.
2. Route the request to whoever owns the integration, since a roster-synced account is provisioned above the classroom level.
3. Confirm what deletion actually removes, rather than assuming an archived class purges stored results on its own.

A parent asking what their Grade 8 student's account holds should get a straight answer, routed to the vendor where needed, not an "I am not sure who handles that." That capability is part of FERPA compliance, not an optional extra.

The Privacy Badges as FERPA Signals: Real, but Not a Certification

Wayground displays several genuine third-party privacy marks, and they are useful evidence of a reviewed privacy posture, but not one of them is a FERPA certification, because that does not exist. The marks include the 1EdTech TrustEd Apps Certified Data Privacy designation, a Project Unicorn Pledge signature, and a Common Sense Privacy Verified rating.

Reading those badges precisely is what keeps a compliance file accurate. Each reflects a real review against a private rubric; none signs a district's agreement or transfers FERPA accountability.

Worth knowing about the strongest of those marks specifically: the 1EdTech TrustEd Apps review runs a vendor's privacy policy, terms of service, and related documents against a data-privacy rubric, and notes whether those policies reference applicable laws such as FERPA, COPPA, and GDPR (1EdTech, 2026). That makes the certification a useful readiness indicator for FERPA-relevant practices, but it still evaluates Wayground's own published policies, not a district's signed contract, which is the distinction that keeps it a signal rather than a substitute.

The bottom row is a common point of confusion covered in Is Quizizz COPPA Compliant?: no public evidence shows Wayground participating in an FTC-approved Safe Harbor program, and even that program is a COPPA mechanism with no FERPA counterpart. FERPA offers vendors no certificate at all.

A teacher can also keep the content-authoring step off the roster entirely. EduGenius can generate quizzes, worksheets, and flashcards for Grades KG-9 from a class profile configured by grade level and subject, with Bloom's Taxonomy alignment and automatic answer keys, without creating a single student account, which means a teacher could build the source questions there and bring a subset into a Wayground live game for the engagement layer, keeping authorship out of the education-record path.

A FERPA Checklist for a Post-Rebrand Wayground Rollout

Turn the legal question into a short verification pass, with the rebrand as the trigger to redo it. Say you teach Grade 8 English and your school syncs rosters through Clever; the steps below are what actually protect the class.

1. Confirm a current signed DPA exists and clearly governs the product now branded Wayground, even if the document names Quizizz Inc.
2. Ask who owns the roster integration, since Clever or ClassLink provisioning sits above your classroom login and controls what identifiable data enters.
3. Default single-session reviews to guest joining, so an education record is created only when saved progress is genuinely needed.
4. Verify the retention behavior for archived classes, rather than assuming ending the year deletes anything.
5. Check your state statute alongside FERPA, since California's SOPIPA or Illinois's SOPPA can require more than the federal floor.
6. Route the contract through legal or a data-privacy officer, not procurement alone, before a district-wide rollout.

Related Reading

• AI, FERPA & COPPA: The Complete School Data-Privacy Guide (2026)
• Is Quizizz COPPA Compliant?
• Quizizz and Student Data Privacy: What Teachers Should Know
• Is Kahoot FERPA Compliant?
• Is Google Gemini FERPA Compliant?
• Diffit and Student Data Privacy: What Teachers Should Know