Your students' information stays protected and stays yours.

Our role under FERPA

We act as a school official and use student data only to provide the service to your district.

Source: DPA §1.3

What we never do with your data

We never sell student data. We never share it for advertising or any use outside our agreement with you. We do not use student data to train AI models.

Source: DPA §1.2

Who owns the data

Your district does. When the agreement ends, we return or delete your data.

Source: DPA §1.6

How long we keep it

While you are a customer, records are retained so history stays intact. When new IEP information is loaded, the prior school year's IEP data is archived, not deleted; service logs remain viewable.

Security

Encryption in transit (TLS) and at rest (AES). Role-based access: teachers see their students, principals their campus, district staff the district. Incident response, vulnerability assessment and threat monitoring, business continuity plans.

Source: DPA Schedule B

Hosting

Hosted on Google Cloud in the United States.

If something goes wrong

We notify you without undue delay after becoming aware of a security breach.

Source: DPA §1.5

Sub-processors

Google (hosting, storage, communications), OpenAI (AI functionality), SendGrid (account notifications); all in the United States. 30-day notice before changes. Full list →

How we use AI

AI drafts PLAAFPs and progress reports, using only information teachers have entered from their day-to-day work. It does not decide eligibility, services, tiers, or whether a service happened. Requests to our AI provider are not stored by the provider.

Human review

Every AI draft is reviewed, edited and finalized by an educator before it is used. Flags are prompts to review, not judgments.

Texas districts

We work with Texas districts under a signed DPA. Tell us if your district uses the Texas Student Privacy Alliance agreement and we will work through it with you.

Documents

Questions

Security and data questions: admin@iepassure.com or the contact form. Reply within one business day.