AI Governance for K-12

Detect, monitor, and guard AI across your school district.

Smart AI routing and full-district visibility, purpose-built for K-12 districts. FERPA-ready out of the box.

Brightfold Gateway, district risk posture console

Monitor

When a student says something concerning, your counselor is paged in seconds, not days.

Detect

Find every AI tool your students touch, even the ones IT didn’t approve.

Guard

Student PII auto-routes to district-controlled models. Jailbreaks blocked. Inappropriate content stopped.

In practice

The signalThe response
  • A new AI tool appears on student devices.Surfaced for review.
  • A student asks ChatGPT to write their essay.Flagged before submission.
  • A 5th grader types a phone number.Never leaves your district.
  • A 9th grader writes about abuse at home.Counselor notified in seconds.
  • FERPA-aligned
  • COPPA-enforced K-5
  • Mandated reporting in real time
  • Immutable audit log
  • District 1
  • District 2
  • District 3
  • District 4

You approved a few AI tools. Staff are using dozens.

The AI you approved is just the tip. Below the surface: notetakers in IEP meetings, assistants reading every keystroke, foreign models, student-facing apps.

The average district sees ~3,000 ed-tech tools a year, with more adding AI every month.

A blocklist can’t keep up; you have to see the traffic.

Iceberg: the AI tools you approved are the visible tip; everything else runs below the surface

See and govern every AI request

AI tools showed up in your district faster than anyone could approve them. Brightfold Gateway puts one policy layer in front of all of them, so you can stop banning everything, stop approving everything, and start governing.

Gateway admin console, risk posture overview dashboard

Integrations

Works with the AI tools already in your schools. Govern district-procured tools, vendor pilots, and the AI built into the apps your staff already use, all from one place.

  • OpenAI / ChatGPT
  • Anthropic / Claude
  • Google Gemini
  • Microsoft Copilot
  • Perplexity
  • xAI / Grok
Live Traffic decision log

See every AI request

Every prompt and response across every provider, in one live decision log: who asked, what for, which tool, and what the gateway did about it.

Guardrail pipeline / filters

Guardrails on every prompt

A layered safety pipeline screens each request and response in real time, flagging, redacting, or blocking content against the policies your district sets.

PII redaction example

Student data stays protected

Sensitive details are detected and redacted automatically. Safe traffic is stored as a hash with no content; only flagged events are retained in full for review.

Mandated reporting alert

Catch what matters most

District-defined triggers escalate mandated-reporting and crisis signals the moment they appear, routing students to supportive responses and notifying the right people.

Shadow-AI discovery

Find shadow AI

The gateway surfaces unsanctioned AI the moment it appears in your traffic: notetakers, foreign models, student-facing companion apps. Sanction, block, or monitor each one with a click.

Audit log with diff view

Prove it later

Every decision and every admin change lands in a tamper-evident audit trail, with board-ready reporting and one-query answers for any compliance review.

Targeted, not invasive

How it works

You don’t reroute your whole network. District IT points only AI-provider traffic at the gateway; everything else keeps flowing through your existing filters untouched.

01

Route

AI traffic is directed to the gateway with one firewall rule.

02

Inspect

Every prompt and response runs through the guardrail pipeline in real time.

03

Decide

Content is allowed, redacted, flagged, or blocked per your policy.

04

Log

The decision is recorded: clean traffic as a hash, risky traffic in full.

05

Forward

Approved traffic continues to the AI provider. The student experience is unchanged.

06

Review

Flagged events surface in the console, where your team reviews them and refines policy.

Guiding principles

One policy. Every tool. Total visibility.

Brightfold Gateway gives district leaders a single layer for AI policy, so guardrails, access, and audit are consistent no matter which tool a teacher or student opens.

Book a demo
Secure by design

Secure by design

Built ground-up with per-district isolation, encrypted interception, and fail-closed enforcement, so no request slips through unscreened.

FERPA & COPPA aligned

FERPA & COPPA aligned

A data strategy designed for student privacy: hash everything, retain only what’s flagged, and keep sensitive content out of third-party models.

Policy you control

Policy you control

District admins manage keyword and phrase rules, semantic guardrails, model access, and per-role permissions, all without touching code.

Deploy in days

Deploy in days

A lightweight footprint that complements your existing filters instead of replacing them. One firewall rule and a certificate, and you’re live.

Built for the way districts are organized

Deployment

Roll out policy at the level that fits, and expand when you’re ready. State & consortium-level policy templates and audit aggregation are on the roadmap.

01

Classroom

Scoped to a single teacher’s tools and roster. The default for pilots.

02

School

Shared policy across a school’s staff and students, managed by the principal or school IT.

03

District

Full district-wide governance, with multi-school federation of policy and audit.

Background gradient

We finally have one view of every AI tool our students and staff use, and one policy that governs all of them. Brightfold turned AI from a blind spot into something our team can actually manage.

Dana WhitfieldChief Technology Officer, Westview School District

Contact

Schedule a demo.
We know you’ll love it.