๐ŸฆŠ ShroudFox

FERPA-defensible AI for K-12

Stop the leak at the source.

Names, emails, and IEP details get tokenized in the browser โ€” before anything reaches ChatGPT. The AI sees placeholders. We never see the real values.

When the base model misses something

Add your own dictionary. Nothing leaves the browser.

District-specific terms โ€” uncommon surnames, internal codes, building names โ€” always get tokenized. The list lives on the device. We never see it.

Built by a school technology leader who needed this for his own faculty.

  • โœ“ FERPA, COPPA, CCPA, and state postures in plain English.
  • โœ“ Signs your state's SDPC/NDPA without redlines.
  • โœ“ Browser-side code open for inspection.
  • โœ“ No customer logos yet โ€” we'd rather say that than fake it.

The problem

Your faculty is already pasting student names into ChatGPT.

Every day, regardless of policy. The question isn't how to stop it. It's where the names went.

Block AI

Teachers switch to personal phones. PII still reaches ChatGPT โ€” just off your network.

Server-side DLP

PII leaves your network to reach the vendor's tokenizer. Trust them not to log it.

ShroudFox

Browser-side. Names never leave the device. Where did they go? Nowhere.

Who it's for

Three audiences, one product.

๐Ÿ›ก๏ธ

IT Directors

Hosted web app. No install, no MDM, no SSO project. Verify the architecture in DevTools in 30 seconds.

๐Ÿซ

Superintendents

The leak is architecturally impossible. Even a pasted IEP is tokenized before the request leaves the device.

โœ๏ธ

Teachers

Type like you would into ChatGPT. Scrubbing happens in the background. You do nothing differently.

Trust & compliance

Built for the district procurement checklist.

Honest about what's audited and what's still in-progress.

SOC 2 Type II
In audit. Type I readiness work began in 2026; Type II target Q4 2026.
FERPA
School official exception, 34 CFR ยง 99.31(a)(1). Full one-pager attachable to any RFP.
COPPA
Covered for incidental data; under-13 direct-user configurations on request.
CCPA / CPRA
Honored. California users have access and deletion rights through the admin panel.
SDPC / NDPA
Will sign your state's addendum without redlines on FERPA clauses.
1EdTech TrustEd Apps
Application planned for 2026.
Need the long version? Read the security explainer โ€” or write to compliance@shroudfox.io.

Verify it yourself

Two minutes. Your own browser.

DevTools โ€” Network
name  ยท  status
POST /api/chat 200
payload preview
"content": "Hi [[PERSON_1]],
send to [[EMAIL_1]]"
30 seconds

Watch the wire in DevTools

Tokens go out. Names don't.

๐Ÿ“ถ / โ†’ ๐ŸฆŠ
โœ“ Still tokenizing
60 seconds

Turn off Wi-Fi

Type a name. It still gets tokenized โ€” locally, on the device.

cloud/static/lib/vault.js
// generated, non-extractable
const key = await
  crypto.subtle.generateKey(
    {name:"AES-GCM", length:256},
    false, // not extractable
    ["encrypt", "decrypt"]);
An afternoon

Read the code

A few hundred lines of commented JS, public repo.

Architecture, side-by-side

Follow the PII.

ShroudFox
PII never leaves the device.
๐Ÿ’ป
Device
tokens
โ˜๏ธ
ShroudFox
tokens
๐Ÿค–
AI

We see tokens. AI sees tokens. A breach of our server reveals tokens.

Server-side DLP
Skyflow, Limina, similar.
๐Ÿ’ป
Device
PII
โ˜๏ธ
Vendor
tokens
๐Ÿค–
AI

PII leaves your network to reach the vendor. Trust required.

Blocking ChatGPT
Most popular first move.
๐Ÿ’ป
Device
blocked
โ˜๏ธ
โ€”
๐Ÿค–
AI

Faculty open ChatGPT on a personal phone. PII goes anyway.

red = PII present. green = tokens only.

Pricing

Two ways to buy. Same product.

Bring your own AI key, or we manage one for you. District plans start at 5 seats; individuals and small teams use the Individual tier below.

For schools & districts โ€” 5 seat minimum

Standard
Bring your own AI key
Default
$10 / seat / month โ€” 5 seat min

Use your district's existing OpenAI, Anthropic, or Google account. Starts at $50/mo (5 seats).

Start free trial
Bundled
We handle the AI account
$14 / seat / month โ€” 5 seat min

One invoice. No upstream vendor setup. Starts at $70/mo (5 seats). Best when you don't already have an AI relationship.

Start free trial
Solo or 1-4 users? Individual plans:
Full Individual pricing โ†’
Standard
$20 / mo
Bundled
$24 / mo
Max
$350 / mo

Flat monthly rate, no per-seat math. The District plan above starts at 5 seats, so 1โ€“4 users get a better deal here. Max is the busy-season tier (rec letters, report cards) โ€” 20 files per message, unlimited files per month, $1,000/mo bundled AI included. Switch between plans any month; Stripe prorates.

See volume discounts & FAQ โ†’ 14-day trial. Cancel before day 15 and you owe nothing.

Your faculty will use AI tomorrow.

Decide where the names go.

No setup call. The trial works the moment you create the account.