Sell to schools and districts with confidence. Folksoft maps how you handle student education records, gets you aligned to the FERPA school official exception, and keeps evidence ready — so procurement says yes.
From the moment you connect your stack to the day a district reviews your privacy posture, Folksoft runs the program for you.
Agents map where education records and PII flow through your product, so you know exactly what FERPA touches.
We get your contracts and controls aligned to the exception — direct control, legitimate educational interest, use limitation, no re-disclosure.
Privacy, retention, and access policies drafted and kept current — no blank templates.
Folksoft watches your AWS, Azure, GCP, GitHub, GitLab, and Okta environments so access controls and drift are surfaced continuously.
We help you answer district security and privacy questionnaires, and stand behind your Data Privacy Agreements.
The distinction decides what you may disclose. Most EdTech vendors are handling protected education records, not directory information.
Records directly related to a student and maintained by (or for) the institution. Protected — disclosure generally requires consent or a FERPA exception.
Limited info a school may designate as disclosable without consent (e.g. name, enrollment status) — but only if it has given notice and honoured opt-outs.
In short: Most student data you touch is protected education records, not directory information. As a vendor you typically operate under the school official exception — Folksoft makes sure your handling actually qualifies.
If any of these sound like you, FERPA is likely on your critical path to closing school and district deals.
EdTech SaaS selling to K-12 schools, districts, colleges, or universities.
Products that store or process student education records or PII on a school's behalf.
Companies being asked to sign Data Privacy Agreements or answer district privacy reviews.
Platforms relying on the school official exception to process student data without individual consent.
Everything EdTech founders ask us before starting their FERPA program.
Still have questions?FERPA binds the institution, but as its vendor you're held to it through the school official exception and your contracts. In practice, districts won't buy unless you can demonstrate FERPA-aligned handling.
Most EdTech startups are district-ready in weeks, depending on how student data flows through your product.
It depends on your product's scope and data flows. Contact us for a tailored quote.
Yes. Folksoft runs the program and pairs you with a real GRC analyst who guides you through district requirements.
Book a demo and we'll map your fastest path to district-ready student data handling.