Everything Your Vendor Review Needs — On One Page

Yes. We offer the NDPA (SDPC Standard Version) because most districts recognize it and it saves both sides weeks of legal review — but we also review district-specific data privacy agreements. Send your agreement to privacy@canoanumis.org; expect a redline or signature within five business days. If your state has an SDPC alliance, check whether an Exhibit E General Offer for Canoa // edu already exists — joining it takes one signature and zero negotiation.

All Canoa // edu data is stored on servers in Moscow, Russian Federation, operated by REG.RU (see the Subprocessor List). Keep in mind what "student data" means here: an anonymous LTI identifier, assignment answers, and scores. We never store names, emails, rosters, or photos, so the risk profile of our hosting is categorically lower than that of a typical edtech vendor. If your district has a hosting-region requirement, tell us in the pilot request and we'll discuss options.

Three layers of protection. First, automatic: all student submissions are deleted after the school year ends plus 90 days, whether or not anyone asks. Second, on request: your LMS administrator or district contact can request erasure of all data tied to your LMS deployment at any time — one operation, confirmed in writing within ten business days. Third, at contract end: deletion is performed and a written certificate of deletion is provided. The full procedure, including a copy-paste request template, is published at Data Deletion Procedure.

No security incidents involving student data have occurred to date. If one ever does, our NDPA commits us to notifying affected districts within the contractual timeframe stated in the agreement, with a description of the data involved, the scope, and remediation steps. Our security posture is deliberately simple: TLS everywhere, signed JWT validation on every LTI launch, per-deployment data isolation, no passwords stored, and — above all — almost nothing worth stealing, because we never hold student identities. Security researchers can reach us at privacy@canoanumis.org.

No. Never. Student submissions are not used to train, fine-tune, or evaluate any AI model — ours or anyone else's. They are not shared with AI vendors, not included in datasets, and not retained beyond the deletion schedule above. This commitment is written into our Student Privacy Policy and our NDPA. Where Canoa // edu features involve AI (for example, optional research-agent curricula), the AI works with the open coin catalog — public scholarly data — never with student work or identifiers.

The district. Student submissions are stored only for grading and review and are deleted on the schedule above; we assert no ownership or reuse rights over student work.

The LTI launch is your SSO. Teachers and students enter through the LMS — no separate CANOA accounts or passwords are created or stored.