FERPA & AI

Protect student records when education uses AI

Emil detects and redacts FERPA-protected student records before a prompt reaches an AI tool — and for edtech platforms, screens responses for age-appropriate content via one API call.

The FERPA problem with AI

  • Teachers paste student work and records into AI tools to draft feedback.
  • Education records in an AI provider's logs can be an unauthorized FERPA disclosure.
  • Edtech platforms can surface age-inappropriate content to minors.

How Emil helps with FERPA

  • Detects student names tied to records, grades, and education identifiers
  • Redacts before prompts reach the AI; blocks unsafe output for minors
  • Works for staff (extension) and platforms (API)
  • Audit trail evidences the control; content is never retained

What Emil can't do alone

  • It doesn't replace your policies, training, or vendor contracts
  • It can't grant data-subject rights or run risk assessments for you
  • It's one control within a broader compliance program

Emil is a technical control, not a compliance program. It reduces risk and produces evidence, but duties like consent, recordkeeping, risk assessments, and contracts (e.g. BAAs, DPAs) sit outside any screening layer. Review with counsel.

Questions

How does Emil help with FERPA?
Emil redacts FERPA-protected education records before a prompt reaches an AI tool, so student data isn't disclosed to an AI vendor, and it keeps an audit trail of the control.
Does it work for edtech products?
Yes. Platforms route their AI through Emil's API to screen every prompt and response, including for age-appropriate content; staff use the browser extension.
Does Emil make us FERPA compliant?
It's a strong technical control for protecting education records in AI workflows, but FERPA compliance also depends on your policies, consent, and disclosure practices.

Other regulations