Privacy & Security

Teacher-first. Student-safe.

Special education data is some of the most sensitive information in any school. IEPath Navigator is built so teachers can draft IEP content without putting identifiable student information at risk.

Principles

Data privacy principles

The non-negotiables that guide every decision we make about your data.

Minimize identifiable data

Designed to work with first-name-only or de-identified PLAAFP content. We discourage entering full names, DOBs, addresses, or student IDs.

Encrypted by default

All traffic uses TLS in transit. Stored data is encrypted at rest by our cloud infrastructure providers.

No selling. No ads.

We do not sell teacher or student data, and we do not run advertising. Your inputs are not a product.

Not the system of record

IEPath Navigator is a drafting and review tool. The official IEP record stays in your district's IEP system.

FERPA-aware design

Built around how schools handle student records

We design the product so the safest path is also the easiest path.

Teacher-controlled inputs

Educators decide what enters the tool. We provide guidance to keep inputs de-identified wherever possible.

Aligned with district policy

Intended to be used consistently with FERPA and your district's data handling and third-party tool policies.

No PII required to generate

The generator produces useful drafts from grade, disability category, state, and PLAAFP themes — not names.

Secure connections

Encrypted in transit and at rest

Every request between your browser and IEPath Navigator is protected.

TLS everywhere

All client and server traffic is served over HTTPS with modern TLS ciphers.

Encrypted at rest

Databases and storage are encrypted at rest by our managed cloud providers.

Access controls

Internal access is restricted, logged, and limited to what's needed to operate the service.

Data handling

How we treat what you submit

A short, plain-language summary of what happens to your inputs.

Secure infrastructure

Hosted on managed cloud providers with isolated databases, role-based access, and audit logging.

Limited retention

Submitted intake content is retained only as needed to provide the service and improve quality during the beta.

AI provider contracts

AI model providers operate under contracts that prohibit using your inputs to train public models.

Beta limitations

What to expect during the beta

  • • IEPath Navigator is in active beta. Features, retention policies, and configuration options may change as we learn from educators.
  • • The tool is a drafting and review assistant. All generated content must be reviewed and approved by a qualified educator before use in an official IEP.
  • • Do not enter information that your district's policy does not allow in third-party tools. When in doubt, de-identify.
  • • Formal data processing agreements (DPAs) are available on request for district pilots.
FAQ

Frequently asked questions

Quick answers to the questions districts and teachers ask most.

Contact for privacy questions

District reviews, DPA requests, and educator questions are all welcome. We respond personally.

Contact us

This page summarizes our current approach during the beta and will be expanded into a full policy at general release.