
AI in education
Education AI tends to sit in the student record, the admission or aid decision, and the tool a learner or a teacher uses after hours. The Intelligence Audit reads those uses from the inside, including the privacy duties that follow the record and the age of the student.
How AI shows up
Admissions and aid models rank an applicant. Proctoring and monitoring tools watch a student. Tutoring bots answer coursework. Learning analytics tell a school who is likely to struggle. Recruiting tools write to prospects. Teachers and staff paste student work into tools the institution did not approve.
Vendors often hold the record: the proctoring video, the tutoring transcript, the predictive score. The school's name stays on the decision to admit, to discipline, or to intervene. A public chatbot on a .edu site can also collect information from a child. The audit treats that as a use.
Rules the audit looks at
The names below are examples the Regulatory and Compliance part and the Sector Controls part look at with your counsel. Listing one is not a determination that it applies to you, and it is not legal advice.
- FERPA, for education records and the vendors that receive them
- COPPA, where an online service is directed to children under 13 or actually knows that it collects their information
- Student-data agreements with the vendors that hold the record
- The Colorado AI Act, where a system makes or strongly shapes a consequential decision about a student, including admission or discipline
FERPA is not COPPA. A university admissions model and a kindergarten app are not the same use. The audit separates them. Your counsel confirms which statute, which state student-privacy rule, and which contract apply. We do not issue that opinion.

What the audit checks
Sector Controls tests student-data agreements and the path from a model to an admissions, aid, discipline, or intervention decision. It asks who can see the record, what the vendor may train on, and whether a student or a parent can get an explanation. Regulatory and Compliance maps where you enroll students and where the vendors sit, with your counsel.
Go-to-Market covers recruiting: lead scoring, outreach, and claims about outcomes or admissions. The TCPA and the FTC are examples where calls, texts, and advertising are in play, not a legal opinion. Shadow AI matters because faculty tools and student-facing bots are often adopted one course at a time.
Before we walk you through it, every Intelligence Audit is reviewed with our counsel. The review is ours, and it is not legal advice to you. The next step after the Assessment report is the Discovery Call.
Questions about this sector
When does FERPA enter an education AI audit?
FERPA enters when the use touches education records, including records a vendor holds for the institution. Sector Controls reads the agreement and the practice: what is shared, what the vendor may do with it, and who can see it. Your counsel confirms the duty. The audit is not a FERPA opinion.
Does COPPA apply only to schools?
No. COPPA can apply to an online service directed to children under 13, or one that knows it is collecting their information, whether or not the operator is a school. A school can also be the party that lets the vendor in. The audit asks which role the organization is in. It does not issue a COPPA determination.
What does Sector Controls check in a school or a college?
Student-data agreements, monitoring and tutoring tools, and any model that shapes admission, aid, discipline, or an intervention. The check is read-only and with permission. Our counsel reviews the audit before we walk you through it. That review is not legal advice to you.
How an engagement with us works
- 01
Intelligence Assessment
A short written read from your answers and what is public
Read - 02
Discovery Call
We talk through the organization and the decision in front of you
Read - 03
Scope and Agreement
Scope is agreed in writing before the audit begins
Read - 04
Intelligence Audit
Eleven parts of work from the inside, and the architecture sits inside that work
Read - 05
Roadmap Preparation
The implementation plan for 90 days, 6 months, and 12 months
Read - 06
Counsel Review
Our counsel reviews the audit before we walk you through it. It is not legal advice to you.
Read - 07
Audit Delivery
The report, the architecture map, the plan, and a leadership readout
Read - 08
Ongoing Advisory
We stay when a capability or a rule changes
Read
AI consultingAI governance consultingSuperintelligence consulting
Updated
Start the Intelligence Assessment
Tell us about the organization and the question in front of you. We read every request and reply to the work email you give us.
Start the Intelligence Assessment