I did not know that….

Hosting providers can get FERPA compliance attestation, but apparently, they can, and at least one does.  But who issues the attestation?