← Trust Center
FERPA Compliant

Data Flow & Privacy Architecture

Every data source ThinkKits uses is a publicly available federal database. No student personally identifiable information (PII) is ever collected, processed, or stored — by design.

NO Student PII — Ever. This Is Structural, Not Policy.

ThinkKits does not have access to student records, names, IDs, grades, demographics, or any FERPA-protected information. Our data sources are federal public databases published at the school and district aggregate level. There is no individual student data in any ThinkKits system. This is a structural architectural guarantee — there is nothing to protect because there is nothing to collect.

Data Flow Diagram
ThinkKits Data Architecture — End-to-End Flow
All arrows represent data movement. Red crossed arrows indicate data that never enters ThinkKits systems.
DATA SOURCES Public federal databases NCES National Center for Education Statistics 105K schools · 18K districts CCD · EDGE · EDFACTS (aggregate) Dept. of Education / USASpending Federal grants & funding data Title I · IDEA · E-Rate allocations ESSA compliance indicators U.S. Census Bureau Community & demographic context SAIPE poverty estimates ACS school-district boundaries State Education Agencies Public curriculum standards TX TEKS · FL BEST · VA SOL · CCSS Publicly published frameworks Student PII / FERPA Records Names · IDs · Grades · Test scores Attendance · Behavioral records THINKKITS PLATFORM What we store & process Knowledge Graph + API Railway · Neo4j (Railway) · FastAPI STORED IN KNOWLEDGE GRAPH School & district identifiers (NCES IDs, names, addresses) Title I eligibility flags · FRL rates (aggregate %) Federal funding allocations (district-level totals) Curriculum standards (TX TEKS, FL BEST, CCSS, etc.) Enrollment totals · Grade band configurations USER ACCOUNT DATA (PLATFORM USERS) Email · Name · Subscription tier (adults only) Search queries · Saved reports · Usage logs NEVER STORED OR PROCESSED ✗ Individual student names or IDs ✗ Student test scores or grades ✗ Attendance or disciplinary records ✗ Any FERPA-protected information ✗ Health or disability records (HIPAA/IDEA) THIRD-PARTY SERVICES What data each receives Clerk Authentication & identity Receives: email, name (platform users only) DPA available · SOC 2 Type II certified Stripe Payment processing Receives: billing info, subscription data PCI DSS Level 1 · No education data Neo4j (Railway) Graph database (hosted) Receives: public school/district data only Encrypted at rest · SOC 2 compliant Anthropic (Claude AI) AI analysis & intelligence Receives: public school/district queries No PII · Enterprise DPA in effect public aggregate public grants aggregate geo std. frameworks BLOCKED user auth billing only KG queries public data Platform User (adult — educator or vendor) queries & reports
Public federal data source
ThinkKits platform
Third-party service
Platform user (adult)
Data flows
Blocked — never enters system
What Data We Store

Public Source Data

Federal databases — no access required
  • NCES Common Core of Data (CCD) — school & district profiles
  • NCES EDGE — geographic & demographic context
  • NCES EDFacts — aggregate proficiency & subgroup data
  • USASpending.gov — federal grant award data
  • Census SAIPE — poverty rate estimates by district
  • State SEA websites — curriculum standards frameworks

What ThinkKits Stores

Neo4j knowledge graph + PostgreSQL
  • School and district names, NCES IDs, locations
  • Title I eligibility status (yes/no flag)
  • Free and Reduced Lunch rates (aggregate %)
  • Total enrollment by grade band (not individuals)
  • Federal funding totals per district
  • Curriculum standard nodes and alignment data
  • Platform user emails and subscription tiers

Third-Party Data Sharing

Minimal, purpose-limited disclosure
  • Clerk: Email + name for authentication only
  • Stripe: Billing info for payment processing only
  • Neo4j (Railway): Public school/district knowledge graph
  • Anthropic: Public data queries for AI analysis
  • Railway: Application hosting (encrypted transit)
  • Pinecone: Anonymized session memory vectors
FERPA Applicability Analysis
Data Type Source Granularity FERPA Applies? ThinkKits Holds?
Student names / IDs School SIS systems Individual student Yes — Protected Never
Student test scores State assessments Individual student Yes — Protected Never
Student attendance School SIS systems Individual student Yes — Protected Never
Aggregate proficiency rates NCES EDFacts School-level % No — Public data Yes — KG node
FRL eligibility rate NCES CCD School-level % No — Public data Yes — KG node
Total enrollment NCES CCD School-level total No — Public data Yes — KG node
Federal grant totals USASpending.gov District-level $ No — Public data Yes — KG node
Title I eligibility status NCES CCD School-level flag No — Public data Yes — KG node
Curriculum standards State SEA websites Framework-level No — Public data Yes — KG node
Platform user email User sign-up (adult) Individual (adult user) N/A — Adult user Yes — account only

Why ThinkKits Is Structurally FERPA-Exempt

FERPA protects personally identifiable information in student education records maintained by schools and school districts. ThinkKits is not a school, does not receive education records, does not act as a school official, and has no access to any system of records containing student-level data. Every data point in our knowledge graph is published publicly by federal agencies at the aggregate school or district level — the same data available to any member of the public at nces.ed.gov or usaspending.gov.

Aggregate Data ≠ Student PII

When we display that a school has "87% FRL eligibility" or "320 total enrolled students," this is school-level aggregate data published in the NCES Common Core of Data. It contains no information about any individual student. The 5% suppression rules applied by NCES to prevent re-identification mean that even in our source data, small subgroup cells are redacted. We receive — and display — only what NCES has already made public.

Was this article helpful?

← Back to Help Center