One page, every assurance claim, each with its real status. We never show a completion badge before completion, and we say what is still underway instead of implying it is done.
How we label claims
- Independently verified. An external party examined it and issued a report.
- Internally tested. We test it ourselves and publish results and limitations.
- Contractual. A binding agreement requires it.
- Self-assessed. Our own assessment, not yet examined by anyone else.
- In progress. Underway, not complete.
- Planned. Committed, not started.
Assurance status
| Program | Status | What that means today |
|---|---|---|
| SOC 2 Type II | In progress | The observation window is underway and the report is expected in Q4 2026. No completed SOC 2 report exists today, and we do not claim one. |
| Independent penetration test | Planned | A summary will be available to schools and districts under NDA after the test completes. We do not claim independent security testing today. |
| WCAG 2.2 AA | Internally tested | Our target standard. We publish tested assistive-technology combinations and known limitations on the Accessibility page. |
| Accessibility Conformance Report (ACR) | Planned | An ACR will be published after an external accessibility audit. No ACR is available today. |
| COPPA practices | Contractual + self-assessed | Consent-first accounts for children under 13. Details in the COPPA notice. We do not claim safe-harbor certification. |
| FERPA practices | Contractual + self-assessed | District data stays district-controlled under district agreements. Details in the FERPA notice. |
Subprocessor register
These are the vendors that process service data on our behalf. We give schools and districts 30 days' notice before adding a subprocessor or materially changing what one processes. To receive change notices, email [email protected] with the subject "Subscribe to subprocessor changes".
| Provider | Service | Data processed | Data subjects | Region | Retention | AI training |
|---|---|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting and storage | All service data (encrypted) | Learners, parents, staff | United States (us-east-1, us-west-2) | Life of contract plus 30-day deletion | Not used for AI |
| Anthropic, PBC | AI lesson generation and tutor dialogue | Pseudonymized lesson context, no learner names | Learners (pseudonymized) | United States | Zero-retention API terms | Training prohibited by contract |
| Stripe, Inc. | Payment processing | Payment details, billing contact | Parents, districts | United States | Per financial regulation | Not used for AI |
| Twilio Inc. (SendGrid) | Transactional email (pending activation) | Email address, message content | Parents, staff | United States | 30 days of logs | Not used for AI |
| Functional Software, Inc. (Sentry) | Error monitoring | Diagnostics with personal information scrubbed before send | None (pseudonymous) | United States | 90 days | Not used for AI |
| Expo (650 Industries, Inc.) | Mobile push notification delivery | Device push tokens | Parents, staff, learners | United States | Until the device unregisters | Not used for AI |
AI and data governance
- The AIVO Adaptive Intelligence Engine decides what to teach, how to adapt it, and which approved supports to use. The AIVO tutors turn that decision into a clear, encouraging learning experience.
- AIVO does not operate a proprietary foundation model in production.
- Model providers are contractually barred from training on learner data.
- AIVO never infers emotions and never makes diagnoses. It works from observable learning signals: practice results, response patterns, chosen breaks, and supports adults approve.
- Solo work and helped work are never blended into one score.
Your controls
The Virtual Brain is a governed learner profile your family reviews, corrects, exports, and can delete. Every profile entry shows its source, its contributor, and its freshness, and parent corrections are reviewed rather than silently applied. Export and deletion are available from the parent privacy settings, and institutional data rights are governed by district agreements.
System status
Live service status, incidents, and maintenance windows are published on the status page. Incidents that affect lessons are also disclosed inside the learning experience, honestly, when they happen.
Research grounding
AIVO's methodology draws on published, peer-reviewed learning-science research. We do not claim institutional partnerships or endorsements, and we will name a research relationship only when a formal agreement exists.
Data processing agreements
Schools and districts can request our Data Processing Agreement and state-specific student-privacy addenda at [email protected]. For institutional data, executed district agreements control over our general terms.
Questions
[email protected] for compliance and procurement, [email protected] for security, [email protected] for privacy rights.