FERPA Compliance
Family Educational Rights and Privacy Act - Protecting student education records
Use Case 1: Third-Party Consultant Sharing
Your district hires an external educational consultant to analyze student performance trends. They need access to academic records but aren't covered under the "school official" exception.
Use Case 2: Research Data Sharing
A university research team wants to study learning outcomes in your district. IRB requires de-identified data.
COPPA Protection
Children's Online Privacy Protection Act - Students under 13
Use Case 3: EdTech Vendor Vetting
Teachers want to use a new learning app. Before deployment, you need to test it with realistic student data - but can't use real K-5 student information.
Use Case 4: Parent Communication Templates
Creating sample IEP letters, progress reports, or disciplinary notices for training new staff or board presentations.
FOIA & Public Records
Freedom of Information Act - Responding to public records requests
Use Case 5: FOIA Request Processing
A journalist requests all disciplinary records for the past 5 years. You have 2,000+ documents to review and redact before the legal deadline.
Use Case 6: Legal Discovery Response
Your district is sued. Opposing counsel requests all email communications about a specific student. You need to redact third-party student information while preserving relevant content.
AI Safety in Schools
Protecting student data when using ChatGPT, Claude, and other AI tools
Use Case 7: AI-Assisted Grading
Teachers want to use Claude to provide feedback on student essays, generate rubric suggestions, or create differentiated assignments based on student work samples.
Use Case 8: Malicious Browser Extension Risk
A teacher installs a "helpful" Chrome extension that promises to enhance ChatGPT. Unknown to them, it's exfiltrating all AI conversations.
State Privacy Laws
130+ state-level student privacy laws and counting
Use Case 9: Multi-State Compliance
Your educational software company serves schools in California (CCPA/CPRA), Colorado, Virginia, and 15 other states. Each has different requirements.
Use Case 10: Air-Gapped Processing
Your state requires that student PII never leave state-controlled infrastructure. Cloud-based tools are prohibited.