Loading...
Loading...
Built for school IT requirements. FERPA compliant, no student PII collected, compliance brief available for your technology team.
The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. Here is how Worksheet Generator meets FERPA requirements:
Worksheet Generator is a teacher-facing tool. Students never create accounts or log in. Teachers generate worksheets using topics, standards, and grade levels -- never student names, grades, scores, or behavioral data. No student personally identifiable information (PII) is required, collected, transmitted, or stored at any point.
We collect only what is necessary to provide the service: teacher email (for authentication), worksheet content (for storage and retrieval), and usage metrics (for analytics). We do not collect teacher Social Security numbers, financial information, or personal health data.
We never use teacher-generated worksheets, prompts, topics, or any user-submitted content to train, fine-tune, or improve our AI models. Your content stays yours. Our AI models are pre-trained on publicly available educational content and are not updated with user data.
All data is encrypted in transit using TLS 1.3. Data at rest is encrypted using AES-256. Database connections use SSL/TLS. API keys and secrets are stored in encrypted environment variables, never in source code.
We are actively pursuing SOC 2 Type II certification through a third-party auditor. This covers security, availability, and confidentiality controls. Expected completion date is available on request.
Worksheet data is retained for the duration of the subscription. Upon cancellation, teachers retain read-only access for 90 days. After that, all data is permanently deleted. Schools can request immediate data deletion at any time by contacting us.
Our core infrastructure runs on Vercel (hosting), Neon (PostgreSQL database), Clerk (authentication), Resend (transactional email), and Upstash (rate limiting). A complete sub-processor list with DPA details is available on request.
In the unlikely event of a data breach, we will notify affected schools within 72 hours, consistent with FERPA and state data breach notification requirements. Our incident response plan is documented and tested.
We provide a detailed student data compliance brief PDF for your IT team. It covers our data practices, security controls, and FERPA compliance in the format your district expects.
Request compliance brief