AIP Tools · K–12 AI Governance
Vendor Comparison Matrix
A framework for comparing AI tools marketed to schools. Privacy scorecards, pricing transparency, red flag warnings, and RFP-ready shortlist templates.
The problem: a school usually discovers what a tool does with student data after it has signed for it. The questions that decide that — who the sub-processors are, how long data is retained, whether it trains a model, what happens at termination — are answerable before signing, and rarely asked in time. This matrix asks them in a fixed order so two tools can be compared on the same evidence, and records what each vendor answered.
5 Tool Categories
- Brainstorming & outline support
- Grammar & style feedback
- Essay feedback (not generation)
- Citation & research tools
- ELL writing support
- Adaptive practice platforms
- Step-by-step problem solving
- Fact fluency (K–5)
- Calculus/Statistics (9–12)
- Tutoring + feedback loops
- Source verification tools
- Literature review support
- Citation generation
- Fact-checking integrations
- AP/IB research tools
- Dyslexia reading support
- Dysgraphia writing tools
- AAC + AI communication
- IEP-aligned platforms
- IDEA / Section 504 compliant
- Lesson planning assistants
- Grading support tools
- Parent communication drafting
- IEP documentation tools
- PD & coaching platforms
8 Evaluation Criteria
| Criterion | What We Evaluate | Weight |
|---|
| Privacy Score | Compliance with the law that applies (Ley 1581, FERPA/COPPA, GDPR); data selling; retention limits | High |
| Pedagogical Evidence | Peer-reviewed research, efficacy studies, independent validation | High |
| Pricing Transparency | Per-student/year cost, hidden fees, multi-year contract risk | High |
| Red Flag Warnings | Terms of service violations, incident history, predatory clauses | High |
| Accessibility | ADA compliance, WCAG 2.1, SPED/ELL features, assistive tech compatibility | Medium |
| Vendor Support | SLA uptime guarantees, response time, training provided | Medium |
| Integration | LMS compatibility (Canvas, Schoology, Google Classroom), SSO | Medium |
| Incident History | Public incidents, school reports, regulatory actions | High |
Privacy Scorecard (A–F)
A — Exemplary
B — Good
C — Adequate
D — Concerning
F — Do Not Use
A tools: signed data agreement under the law that applies (FERPA, Ley 1581, GDPR), no data selling, short retention, the school owns its data, fast breach notification. F tools: sell or reuse student data, no enforceable agreement, no opt-out. There is no “FERPA certification” — ask for the signed agreement, not a badge.
Red Flag Warnings
- Data Selling: Vendor Terms of Service permit selling or sharing student data with third parties for commercial purposes.
- 3-Year Lock-in Before Pilot: Contract requires multi-year commitment before the school has run a pilot — removes negotiating leverage.
- No Privacy Certification: Vendor has not completed iKeepSafe, Student Privacy Pledge, or equivalent certification.
- Training on Student Data: AI model is trained or fine-tuned using student-submitted content without explicit consent.
- Breach Notification >72h: Terms allow vendor to delay breach notification beyond 72 hours, violating best practices.
- Incident History: Tool involved in publicly documented inappropriate content, data breach, or regulatory action.
- No Opt-Out Mechanism: Parents or students have no mechanism to opt out of data collection or AI processing.
Contract Clause Library
Data Ownership
"The School retains all rights to student data. Vendor has no ownership interest."
Data Deletion
"Upon contract termination, vendor will delete all student data within 30 days."
No Data Selling
"Vendor shall not sell, share, or commercially exploit student data under any circumstance."
No AI Training
"Student data shall not be used to train, fine-tune, or improve AI models without explicit written consent."
Breach Notification
"Vendor shall notify the School within 24 hours of any confirmed or suspected data breach."
Audit Rights
"The School retains the right to audit vendor security practices annually with 30-day notice."
Indemnification
"Vendor shall indemnify the School for losses arising from vendor's breach of this agreement."
Pilot-First
"This agreement covers a pilot period only. Multi-year commitment requires separate board approval."