Legal & compliance

Built for student-data privacy.

AskElira is a FERPA processor and complies with New York Education Law §2-d and 8 NYCRR Part 121. Review the full agreements below before you sign — your legal and data-privacy teams are welcome to.

Master SaaS & Services Agreement

Updated v3.0 — August 2026

The master contract governing a school’s paid use of the AskElira platform and enrollment-automation services.

Data Processing Agreement (FERPA)

Updated v3.0 — August 2026

The FERPA-compliant processor agreement: the school is the data Controller, AskElira is the Processor acting only on the school’s instructions.

NY Education Law §2-d Addendum

Updated v3.0 — August 2026

The New York student-data-privacy addendum (Ed Law §2-d and 8 NYCRR Part 121) that supplements and, on any conflict, controls over the main Agreement.

Observation Week Agreement (Trial DPA + NY §2-d)

Updated v2.5-T — August 2026

The single short agreement a school signs for a free 7-day observation week: FERPA processor terms and the NY §2-d protections, scoped to a read-only week in which no family is contacted.

Parents' Bill of Rights — Supplemental Information

Updated v3.0 — August 2026

Exhibit B to the NY §2-d Addendum — the supplemental information NY Education Law §2-d and 8 NYCRR §121.3(c) require from AskElira as a third-party contractor, published here as a convenience copy for your school to append to its own Parents’ Bill of Rights for Data Privacy and Security.

Privacy Policy (Schools)

Updated v3.0 — August 2026

The schools-facing privacy policy in reviewable PDF form — data collected, safeguards, breach notice, retention, and deletion — including the July 2026 Update Notice.

Information Security Policy (Data Security & Privacy Plan)

Updated v3.0 — August 2026

AskElira’s Data Security and Privacy Plan under 8 NYCRR § 121.6 — the administrative, technical, and physical safeguards behind the DPA and §2-d Addendum.

Insurance & Liability Coverage

Updated July 2026 — certificates reissued 22 July 2026

AskElira’s insurance in force — General Liability, Professional Liability (Technology E&O), and Cyber Liability — so your procurement, legal, and data-privacy staff can confirm coverage before signing.

Guardian Consent Language (Enrollment Applications)

Updated v3.0 — August 2026

Ready-to-use consent language schools add to their paper or digital enrollment application so families opt in to enrollment calls, texts, and emails.

Do-Not-Contact Policy

Updated v1.0 — July 2026

How a number or email gets onto the suppression list, which channels it stops, how long it is kept, and who may remove one.

TCPA Consent & Outreach Scripting

Updated v3.0 — August 2026

The signed guardian consent form plus the FCC-compliant scripts used for every automated enrollment call, text, and email.

Looking for who handles your families’ data? The subprocessor schedule is published in full and is the schedule incorporated into the Data Processing Agreement at §5.3 — every provider, what it does, and where it processes.

Reviewing pre-purchase? Our team walks your ops and data-privacy staff through all of these during onboarding — book a walkthrough. See also our Privacy Policy and Terms.