Everything a district reviewer needs to evaluate the MN School Dashboard — what it does, what it doesn’t do, what data we hold, and how to request a signed DPA.
A web application for K–12 school staff. Teachers, counselors, and administrators log in to view student MN profiles, counselor support queues, class summaries, and basic usage reports.
| Data type | Source | Purpose | Retention |
|---|---|---|---|
| Student first name, last name | School import | Roster display | Duration of service + 30-day wind-down |
| Student ID (school-assigned) | School import | Roster deduplication | Duration of service + 30-day wind-down |
| Grade level | School import | Class grouping | Duration of service + 30-day wind-down |
| Class assignment | School import | Teacher/counselor routing | Duration of service + 30-day wind-down |
| MN/MI self-ratings (19 dimensions, 1–10) | Student self-report | Profile generation | Duration of service + 30-day wind-down |
| NatureType pattern labels | Derived from ratings | Counselor/teacher guidance | Duration of service + 30-day wind-down |
| Counselor support flags (structured only) | Counselor input | Triage queue | Duration of service + 30-day wind-down |
| Counselor triage notes (free-text, per student) | Counselor input | Private counseling workflow notes | End of school year (June 30) — auto-deleted |
| Staff name, email, school role | School import | Auth and access control | Duration of service + 30-day wind-down |
| Dashboard session logs (timestamps, page views) | Automatic | Security and audit | 90 days rolling |
The dashboard includes one AI feature: a staff support assistant. Its scope is narrow, its student-data boundary is architectural rather than policy-based, and school staff retain all decision-making authority over students.
How the data boundary works. When a staff member submits a question, only that typed question is sent to Anthropic’s Claude API (US data centers). Student names, IDs, assessment ratings, NatureType labels, flags, and all other student records are never appended to an AI request. This is an architectural constraint — student data is absent by design, not by policy rule.
Instruction scope. The assistant operates under written instructions that limit its responses to two topics: (1) how to use the dashboard, and (2) how to interpret Multiple Natures framework concepts. It is explicitly instructed to decline questions about individual students, decline questions about school policy or discipline, and escalate to human support for anything involving student privacy, high-stakes interpretation, or topics outside its defined scope. A full AI Transparency Statement — including a summary of the assistant’s instruction scope — is available to district administrators on request at steven@multiplenatures.com.
| Framework | Status | Key commitment |
|---|---|---|
| FERPA 20 U.S.C. § 1232g |
Compliant | MNI operates as a school official under 34 C.F.R. § 99.31(a)(1)(i)(B). Student data used only to provide the service. No re-disclosure without written consent. |
| COPPA 15 U.S.C. §§ 6501–6506 |
Compliant | School provides operator authorization under 16 C.F.R. § 312.5(b)(1) for under-13 students. No commercial use. |
| NY Education Law § 2-d 8 N.Y.C.R.R. Part 121 |
Compliant | No sale of student data. No advertising use. Breach notification within 7 calendar days. Data security program meets Part 121 requirements. |
Cache-Control: no-store.MNI’s security controls are designed to align with the SOC 2 Trust Service Criteria (Security, Availability, Confidentiality). Our primary infrastructure sub-processor, Cloudflare, holds SOC 2 Type II certification.
Notification includes: nature of the breach, data categories affected, approximate number of students impacted, steps taken to contain it, and a point of contact for follow-up. We do not wait for a complete forensic investigation to notify — we notify as soon as the breach is confirmed and update you as facts develop.
A complete DPA covering FERPA, COPPA, NY Education Law § 2-d, AI boundaries, data inventory, breach notification, sub-processors, and deletion commitments. Fill in the school name and date, print or save as PDF, and return for countersignature.
Required by New York Education Law § 2-d. Explains what data MNI collects, how it is used, and what rights parents and eligible students have over that data.