Student Data in the Agent Era, Book 3 — The Flow Map, the Protected Core & the Data Steward Pack

AI agents now legitimately touch rosters, grades, and records, and the sector just watched a single student-information vendor breach expose data on tens of millions of students. "Never paste" is over as a strategy. Book 3 of The Agentic Classroom is the deep-dive that replaces it: what may flow where, under which agreement, verified how, and who answers for it. Written for the people who own student data in practice: sped directors, counselors, data and technology coordinators, and teachers handling sensitive records.

What's inside

• The Book (13 dense pages, PDF): the four-tier data taxonomy (directory information to the protected core, with the small-N trap between); the five-column flow map; the consent and notice layer in plain language (the school-official exception, opt-outs, parent rights, state add-ons); the IEP/504/health/counseling rules; retention, deletion, and the vendor exit; agent-era incident anatomy; and role playbooks.
• The Data Steward Pack (editable Word): five artifacts: the data inventory, the flow map template, the deletion-request letter, the incident log, and printable role lane cards for teachers, counselors, sped directors, and coordinators.
• The Student Data Flow Map (printable PDF): the five columns plus a fully worked example, ready for committee meetings and vendor calls.

Questions this book answers

Can AI tools touch IEP data now that our district signed agreements?

Only where the contract names it explicitly, special-education leadership has signed off in writing, the scope is the minimum that works, and an access log exists that a human reviews. Four yeses or no flow. "The platform can see the whole SIS" is an argument for narrowing the platform, never for waving the data through.

How do I know what an AI connector actually reads and keeps?

The flow map: five written columns per tool — reads, writes/sends, retains (contract section numbers, not FAQ pages), legal basis, and a named owner. Fifteen minutes per tool, and it survives audits, parent questions, and breach letters because the answers existed before anyone was upset.

What does deletion actually mean with AI vendors?

A contractual clause you invoke in writing with certification required, including backups — and one thing deletion cannot do: un-train a model. Which is why the no-training clause is fought for at signing, not repaired at exit. The Pack includes the letter template.

Is this legal advice?

No: FERPA, IDEA, your state statute, your contracts, and your counsel govern. This book makes your time with all five shorter and sharper.

Book 3 of 3. Book 1: When AI Stops Chatting and Starts Working. Book 2: The District AI Playbook. Every claim cited to a named, dated source. Instant digital download. District licenses: info@dcadditivepros.com