Data anonymization

Sometimes attendance data has to leave the classroom — for an audit, a review, or a researcher — without carrying students’ names with it. Student codes let you share the records and keep the identities out.

Choosing Normal (real names) or Anonymized (student code) when downloading a roster catalog

The same Normal or Anonymized choice when exporting course attendances

A unique code per student

Each student can have a school-assigned code, unique across the system. Add it as a column when you import a roster from Excel.

Normal or anonymized, per export

Attendance exports and roster exports — the QR catalog, QR image archive, Apple Wallet archive, and Google Wallet export — offer a Normal or Anonymized choice. Anonymized swaps names for the code in columns, file names, and card or pass labels.

Row order can’t give students away

Anonymized exports are shuffled, so a student’s position in the list — alphabetical, or in roster order — can’t be used to work out who they are.

Controlled by permission

Only accounts granted the anonymized-export permission see the option, and the server checks it again on every request. Access stays least-privilege.

What this is — and isn’t

Anonymized exports replace names with codes. Whoever holds the code list can still match a code back to a student, so treat that list as sensitive. QR codes and passes themselves stay encrypted. We don’t claim regulatory certification — this is a practical way to share less, described as it works today.

How import and export work

Explore more

Import & export Security & privacy Attendance reports