Legal & compliance · Coverage
Where AskElira operates
Your agreement carries the student-privacy law of the place your school is in. That is why onboarding asks where you are before it asks anything else — and why the list below is short.
A place is on the first list only when two things are true. A person has read the whole onboarding packet against that place’s law and signed off on it, and every deadline that law imposes is one this software already meets. The second test is mechanical and it runs on every deployment: if a state required us to notify you of a breach faster than our systems do, or to delete family data sooner than they do, that state comes off this list automatically until the software changes — not the paperwork.
Onboarding today
| Place | Schools we can onboard | Law your agreement carries |
|---|---|---|
| New York City New York | Charter school, District public school | NY Education Law § 2-d (N.Y. Educ. Law § 2-d) Binds third-party contractors that receive student data from an educational agency: a signed addendum, a data security and privacy plan, the Parents’ Bill of Rights supplement, and breach notice to the agency without unreasonable delay. 8 NYCRR Part 121 (8 NYCRR §§ 121.1–121.12) The implementing regulation: § 121.3(c) supplement content, § 121.6 plan contents, § 121.9 contractor obligations, and the § 121.10 breach-notice clock of no more than seven calendar days after discovery. FERPA (20 U.S.C. § 1232g; 34 CFR Part 99) AskElira acts as a school official with a legitimate educational interest, under the school’s direct control, using data only for the contracted purpose. TCPA (47 U.S.C. § 227; 47 CFR § 64.1200) Governs automated calls and texts to guardians: prior express consent, the called party’s local-time curfew, sender identity, a callback number, and an honoured opt-out. NYCPS Chancellor’s Regulation A-820 (Chancellor’s Regulation A-820) Governs confidentiality and release of student records in New York City Public Schools; a district-authorized school applies it on top of § 2-d. |
| New York State New York | Charter school, District public school | NY Education Law § 2-d (N.Y. Educ. Law § 2-d) Binds third-party contractors that receive student data from an educational agency: a signed addendum, a data security and privacy plan, the Parents’ Bill of Rights supplement, and breach notice to the agency without unreasonable delay. 8 NYCRR Part 121 (8 NYCRR §§ 121.1–121.12) The implementing regulation: § 121.3(c) supplement content, § 121.6 plan contents, § 121.9 contractor obligations, and the § 121.10 breach-notice clock of no more than seven calendar days after discovery. FERPA (20 U.S.C. § 1232g; 34 CFR Part 99) AskElira acts as a school official with a legitimate educational interest, under the school’s direct control, using data only for the contracted purpose. TCPA (47 U.S.C. § 227; 47 CFR § 64.1200) Governs automated calls and texts to guardians: prior express consent, the called party’s local-time curfew, sender identity, a callback number, and an honoured opt-out. |
Not yet — and what is missing
These are places we have researched and cannot serve today. The reason is stated as it is, not as a date we have not earned. If your school is on this list and you want us there, tell us — a school waiting is the thing that moves one of these up.
| Place | Law we would have to paper | Why we are not there |
|---|---|---|
| California Charter school, District public school | California Ed. Code § 49073.1 (Cal. Educ. Code § 49073.1) SOPIPA (Cal. Bus. & Prof. Code § 22584) Preliminary research, not a reviewed legal position. | No California statutory addendum has been drafted. Education Code § 49073.1 prescribes contract terms a school district agreement must contain; until those terms exist as an executable document and a person has read them against the base packet, a California school cannot be onboarded. |
| Florida Charter school, District public school | Florida student records (Fla. Stat. § 1002.22; § 1002.222) Preliminary research, not a reviewed legal position. | No Florida addendum drafted or reviewed. |
| Illinois Charter school, District public school | Illinois SOPPA (105 ILCS 85) Preliminary research, not a reviewed legal position. | No Illinois SOPPA addendum drafted or reviewed. |
| Los Angeles Unified School District Charter school, District public school | California Ed. Code § 49073.1 (Cal. Educ. Code § 49073.1) SOPIPA (Cal. Bus. & Prof. Code § 22584) Preliminary research, not a reviewed legal position. | Inherits California’s block, and LAUSD’s own vendor data-security requirements have not been read. |
| Massachusetts Charter school, District public school | Massachusetts student records regulations (603 CMR 23.00) Massachusetts data security regulations (201 CMR 17.00) Preliminary research, not a reviewed legal position. | No Massachusetts addendum drafted or reviewed; 201 CMR 17.00 requires a written information security program clause we have not papered. |
| New Jersey Charter school, District public school | New Jersey student data privacy (N.J.S.A. 18A:36-35; N.J.A.C. 6A:32-7) Preliminary research, not a reviewed legal position. | No New Jersey addendum drafted or reviewed. |
| New York — private & independent schools Private / independent school | NY SHIELD Act (N.Y. Gen. Bus. Law §§ 899-aa, 899-bb) TCPA (47 U.S.C. § 227; 47 CFR § 64.1200) Preliminary research, not a reviewed legal position. | A private school is not an "educational agency" under Education Law § 2-d, so the § 2-d Addendum that Part 3 of the packet is built around does not apply to it. Part 3 needs a different instrument — SHIELD Act data-security terms and a FERPA position that does not assume federal funding — and that instrument has not been written or reviewed. |
| Texas Charter school, District public school | Texas Student Privacy Act (Tex. Educ. Code §§ 32.151–32.156) Preliminary research, not a reviewed legal position. | No Texas addendum drafted; Education Code Chapter 32 Subchapter D has not been read against the packet. |
The deadlines every school gets, everywhere
These are read from the running software, not typed onto this page. They are what a new state’s law is measured against before that state can appear above.
- Breach affecting your protected data: notice to you within 48 hours of discovery.
- Family personal data: deleted within 90 days of a record going inactive.
- Proactive contact with a guardian: 8:00 AM–8:00 PM, weekdays only — in your school’s time zone and in the family’s own.
How this page stays true
Every law named on this page is watched. Once a week an automated job re-reads the 21 statutes, regulations and district policies these agreements rest on, and files a finding when one changes — with the changed sentence quoted and the clause it bears on named.
That job cannot change your agreement. It does not edit the packet, the contract text, or the software; it can only tell a person to look. A contract is a promise some running code has to keep, and no automated check can tell that a sentence has quietly become untrue — so a human reads every change and makes any edit, and the version history in your packet records what moved and when.