SchoolAI Privacy Guide: What Data Is Collected and How It's Used

Privacy is SchoolAI's strongest pillar in the SafeGradeAI rubric at 92/100, reflecting vendor-documented commitments around data use, compliance certifications, and restricted visibility of student content.

No AI training on student data

SchoolAI states that student data is never used to train AI models, and that its underlying AI providers are contractually bound not to train on or sell student data. This is a stronger commitment than many consumer AI products offer by default, where training opt-outs may require manual configuration. Details are published on SchoolAI's Trust Center and privacy notices.

Compliance certifications

SchoolAI publicly lists the following on its compliance page:

• SOC 2 Type 2 — an independent audit of security controls.
• FERPA — alignment with the Family Educational Rights and Privacy Act for student education records.
• COPPA — alignment with the Children's Online Privacy Protection Act for users under 13.
• 1EdTech TrustEd Apps — a third-party edtech privacy/security review badge.

See SchoolAI's Compliance page for the current list and supporting documentation. SafeGradeAI treats these as vendor-documented certifications, not as guarantees of a specific district's own compliance — that depends on how a district configures and contracts for the product.

Data processing agreements

SchoolAI states that standard Data Processing Agreement (DPA) documentation is available, per the vendor's current pricing and help pages (see SchoolAI Pricing). Districts should confirm current DPA terms directly with SchoolAI as part of procurement, since specific contract terms can change.

Visibility of student content

• Student uploads are visible to the uploading student and their assigned teachers — not to other students.
• All Sidekick activity is visible to teachers, meaning student prompts and AI responses are not private from educators.
• District administrators can apply guardrails at the account level, which implies a level of administrative visibility and control beyond a single classroom.

SafeGradeAI assessment

The combination of a no-training commitment, named third-party certifications, and restricted content visibility is why SchoolAI scores highest among reviewed tools on privacy. SafeGradeAI has not independently audited SchoolAI's SOC 2 report or DPA language; our score reflects that these instruments are documented and named, which is itself meaningful transparency relative to tools that make no such disclosures.

What SafeGradeAI recommends

• Request SchoolAI's current DPA and confirm data retention and deletion terms before district-wide rollout.
• Ask whether your district's SchoolAI instance uses any third-party AI providers, and confirm those providers' contractual no-training commitments in writing.
• Review the is-it-safe overview and the teacher guide for how these privacy protections interact with day-to-day classroom use.
• Visit the SchoolAI hub for the complete set of guides.