Privacy

Data minimization, retention, and PII boundaries designed for districts.

Data minimization
  • Only roster IDs, grade level, and initials for students in production.
  • Sandbox uses anonymized demo data with no PII collection.
  • Telemetry is aggregated; no student-level analytics in the sandbox.
Retention and deletion

Data retention defaults to 12 months for pilots, customizable per district.

Deletion requests honored within 7 days with audit logs for administrators.

Family rights

FERPA-aligned access and correction workflows, with exportable records for families.

Review security posture