Education
US, EU, Global
6 source references
3 mapped control areas
Regulated SaaS
About this template
A teacher pastes a transcript into a prompt because it is the fastest way to ask a question. That single habit is how a protected record leaves the building. Schools and universities reach for this starter to keep the assistant available and the record intact. The controls here narrow what a prompt may carry and what an answer may claim.
A registrar, a course designer and a student support team share one assistant. The risk is not exotic. It is an answer that quietly shapes a placement decision, or a record that travels further than anyone intended.
No record work starts without a verified user, organization and role. Student record redaction runs next. A second masking pass covers pupil identifiers, parent contacts, grade reports, disciplinary files and learning plan fields. Bulk moves are handled differently, because transcript exports, gradebook downloads, roster dumps and mass aid extracts are blocked rather than masked. Test scores, attendance records and aid packages are also blocked when they appear in a prompt.
Age appropriate term rules block self harm, sexual content, bullying, weapons and drug or eating disorder material. One control here does less than its name suggests. The bias watch reacts only to hiring, promotion or performance review wording, which education prompts do not carry. Treat it as a monitoring hook and not a fairness control. Citations are required at a confidence of 0.85, so guidance about policy points at something a person can read. An answer needs a combined 0.80 to pass, with accuracy and relevance both at 0.82.
History capture keeps a redacted record of activity. The audit marker records that a request was evaluated and never stops one. Retention periods, parental consent and age verification are not set here. Enrollment, grading and placement calls stay with the staff who own them.
Source frameworks, standards and obligations
Control areas mapped by this template
Deployment options
Adapt the template in three steps
Review the scope
Confirm that the regions, source references, control areas and deployment options fit your use case.
Adapt the configuration
Open the template in the Verdictan console. Set its policies, thresholds, routing and review requirements for your environment.
Test before deployment
Test each policy outcome. Confirm that allowed, redacted, blocked and reviewed requests behave as expected.
Explore more Industry-Specific templates
Finance
Protect financial data, flag material nonpublic information, add supervisory notices and retain audit evidence with this starter.
Healthcare (U.S. — HIPAA)
Start with selected HIPAA controls for protected health information, minimum-necessary access, retention and clinical review.
Healthcare (EU — GDPR)
Map European health-data controls for GDPR Article 9 and EU AI Act risk management with this starter.