The AI learning platform your DPO can actually approve.
Sign one DPA. Connect your SIS. Onboard teachers in 30 minutes. Pull a TraceLayer audit trail when a parent — or a regulator — asks.
مصمَّم للمدارس، مع ضمانات مدمجة من البداية.
How a school runs on CurioPilot.
Procurement + onboarding
- Sign DPA + Privacy Notice
- Connect SIS (OneRoster)
- Configure AI policy
- Bulk-import users
- Set retention windows
Day-to-day operations
- School Admin Dashboard
- Today's priorities triage
- Intervention queue
- Co-Teacher digest
- Smart Homework + diagnostics
Ongoing trust + audit
- TraceLayer per-tenant
- Audit log (7-year retention)
- DPA renewal
- DSAR fulfilment
- GDPR Article 17 erasure
Built for the systems schools have.
OneRoster Sync
Daily delta from PowerSchool, Infinite Campus, Skyward — your roster, current.
LiveLTI 1.3
Embed in Canvas, Moodle, Blackboard. SSO + grade passback included.
LiveGoogle Classroom
Roster + assignments + grade passback — two-way sync (on the immediate roadmap).
RoadmapStripe
B2B billing, token bundle top-ups, idempotent webhooks for procurement.
LiveThe facts your IT can verify.
We publish the technical posture, not just the marketing version. Your IT can run our PII attestation script, review our Firestore security rules under NDA, and audit our retention policies before you sign anything.
See full compliance postureThings your IT can verify
- Run our PII attestation script:
npm run tracelayer:attest:check - Review our Firestore security rules (NDA)
- Review our DPA + sub-processor list
- Audit log retention: TraceLayer 90 days, audit logs 7 years
- Verify field-encryption keys via Cloud Console
What week 1 looks like.
Real timeline. Fast, but not magical.
- Day 1: Discovery call (45 min)
- Day 2: DPA + Privacy review with your DPO
- Day 3: SIS connection test (your IT in the call)
- Day 4: AI policy configuration + first teacher invite
- Day 5: Teacher training session #1 (live)
- Day 6: First class assigns + first activity goes live
- Day 7: First TraceLayer audit pull (we walk you through)
For schools, in detail.
Are you FERPA / GDPR / COPPA compliant?
Yes. The compliance posture is documented at /compliance: TraceLayer logs every AI decision, GDPR Article 15 export and Article 17 erasure are one-click, and COPPA gating blocks personalisation for under-13s without verified parental consent.
Do you train models on our students' data?
No. Our AI providers (Google, OpenAI, Anthropic) are configured on enterprise tiers that contractually exclude training. We log which provider answered each AI call so you can verify.
How long does onboarding take?
First DPA review with your DPO inside week 1. SIS connection test inside week 1. First teacher trained and assigning activities inside week 2. Most schools are running real workloads by week 3.
Can we run our own DPIA?
Yes — we provide a DPIA template populated with CurioPilot-specific facts to make your assessment fast.
What if our SIS isn't on the supported list?
OneRoster is our canonical interface. If your SIS speaks OneRoster (most do), we connect. If it doesn't, talk to us about a custom adapter — we built ours to be extensible.
What about model-side logging by the AI provider?
Provider-side logs are governed by their data-processing agreements (linked in our DPA). Our enterprise tiers prohibit training on customer data; provider logs are scoped to billing and abuse prevention.
How do we export our data if we leave?
One-click full-tenant export in JSON. Includes all student profiles, submissions, TraceLayer rows, and audit logs. No retention beyond what you've configured.
See CurioPilot in your school’s context.
45-minute demo with you, your IT, and your DPO. We show TraceLayer scoped to a real school, walk through the DPA, and answer your jurisdiction-specific questions.