Data Processing Agreement (DPA)
Data Processing Agreement (DPA)
Sign a Data Processing Agreement with Ed.ai
Ed.ai signs the National Data Privacy Agreement (NDPA), the standard student data privacy agreement many districts already use. Every state has a packet already signed by Ed.ai. In 20 states, it is your state's official version of the NDPA.
Get your state's data privacy packet — select your state to download your signed packet.
Why Ed.ai uses NDPA
The National Data Privacy Agreement (NDPA), published by the Student Data Privacy Consortium (SDPC) and A4L, is the most widely adopted national template for student data privacy contracts. It is:
Already familiar to many US districts and their counsel
Maintained and updated by an education-focused consortium (not a single vendor)
Available in official state versions, which we use in 20 states
Reusable: other districts in your state can join an existing agreement
By standardizing on NDPA, we eliminate weeks of back-and-forth for districts.
What's in our DPA
Select your state on the Data Privacy Packet page to get your packet. It is already signed by Ed AI Technologies, Inc.
Your state's version
20 states — your state's official NDPA: Arizona, Arkansas, California, Florida, Illinois, Iowa, Maine, Massachusetts, Michigan, Missouri, Montana, New Hampshire, Oregon, Pennsylvania, Rhode Island, South Carolina, Tennessee, Utah, Vermont and Washington. You receive your state's official version, signed by Ed.ai.
All other states: you receive the national NDPA, signed by Ed.ai.
What the agreement covers
Definitions (student data, school official, operator, etc.)
Data ownership and purpose limitation
Security and breach notification
Parent/student rights
Term, termination, and data destruction
Another district in your state already signed with Ed.ai?
You may be able to join that agreement instead of signing a new one. Email privacy@ed.ai and we'll confirm.
How to sign
Ed.ai has already signed your state's packet. Three steps for your district:
1. Download your state's packet from the Data Privacy Packet page
2. Fill in your district's details and countersign
3. Email the signed copy to privacy@ed.ai, and we'll confirm it's on file
What the DPA covers
Ed.ai's role as "school official" under FERPA
Student data ownership (school owns it)
Purpose limitation (educational use only)
No advertising, no sale, no behavioral profiling
Sub-processor obligations
Security standards
Breach notification (timeline, content, coordination)
Data retention and destruction
Parent access and correction (through the district)
Audit rights (district)
Term and termination
FAQ
We already use the NDPA via another vendor — do we need to sign with Ed.ai?
Yes, you sign a separate agreement with Ed.ai, but the body of the agreement is the same NDPA you already know. Only the details specific to Ed.ai and your state differ.
Our district has its own DPA template. Can we use that instead?
Yes. Send your template to privacy@ed.ai and we'll review it. If you'd like to move faster, our NDPA packet is already signed, so your district only needs to fill in its details and countersign.
Does signing the DPA change anything about how Ed.ai processes data?
No — the DPA formalizes and audits our existing practices (FERPA school-official role, US hosting, no-training, no-advertising). The commitments in the DPA mirror our Privacy Policy and Trust Pledge.
What happens at the end of the contract?
Student data is deleted from production within 90 days of contract end, and from backups within 12 months, as set out in our Privacy Policy. Your district can also request deletion at any time: we remove it from production within 30 days, faster than the 60 days the NDPA requires.
Can a private school sign?
Yes — private schools can sign the same NDPA. Reach out to privacy@ed.ai.
Can a charter school management organization sign on behalf of its schools?
Yes, with appropriate authority delegation. Reach out to privacy@ed.ai.
Contact
DPA, privacy, and legal questions: privacy@ed.ai
Phone: +1 617 545 7366