A practical guide for district leaders navigating AI policy, FERPA compliance, and classroom-level controls. Written for superintendents, CTOs, and curriculum directors who need to move from policy document to daily operation.
In the 2024-25 school year, over 70% of U.S. teachers reported that students were already using generative AI tools, according to surveys from the RAND Corporation and the Pew Research Center. Most districts had no formal policy in place.
The result was predictable: inconsistent use from classroom to classroom, unanswered questions about student data, and administrators with no visibility into what was happening. Some teachers embraced AI as a learning tool. Others banned it entirely. Neither approach was governed.
AI governance is not about choosing to allow or ban AI. It is about building the system that lets a district make deliberate, enforceable decisions about how AI is used in every classroom, for every student, every day.
Most districts have a policy document. Very few have a governance system. A policy says what should happen. Governance makes it happen.
Effective AI governance in K-12 operates at four levels. Each level has distinct responsibilities, and the system only works when all four are connected.
The board-approved document that defines the district's position on AI. Covers acceptable use, data privacy standards, prohibited activities, and the review process for new AI tools.
The systems that enforce the policy. Access controls, content filtering, data routing, and configuration settings that make the policy operational at the platform level.
The classroom-level decisions about when and how AI is used. Teachers need tools to configure AI for specific lessons, assignments, grade levels, and student needs.
The feedback loop. Usage data, compliance reports, and audit trails that let administrators know whether the governance system is working and where adjustments are needed.
Most districts get stuck between Level 1 and Level 2. They write a policy but have no mechanism to enforce it at the technical level. The policy sits in a binder or a PDF. Teachers are left to interpret it on their own. This is the gap that governance platforms are designed to close.
Policy Cards are Beni's mechanism for connecting district policy to classroom practice. Each Policy Card is a configurable rule set that defines exactly how AI operates in a given context — which features are available, what content is filtered, what guardrails are active. Teachers deploy Policy Cards in minutes. Administrators see compliance in real time. Learn more about becoming a Founding Partner.
Three federal laws form the baseline for any AI governance framework in K-12. Districts cannot delegate responsibility for these — they apply regardless of which AI vendor is involved.
FERPA protects the privacy of student education records. When an AI tool processes, stores, or generates content based on student data, FERPA applies. Key requirements for districts:
When teachers sign up for free AI tools using their school email and then have students use those tools, the district has likely created an unauthorized disclosure of education records. The teacher did not have authority to enter into a data sharing agreement on the district's behalf.
COPPA applies when online services (including AI tools) collect personal information from children under 13. In school settings, teachers can consent on behalf of parents, but only if the data is used solely for educational purposes. Districts must:
AI tools deployed in classrooms must be accessible to students with disabilities. This means:
The state policy landscape is moving fast. Since 2023, more than 30 states have introduced legislation addressing AI in education. Requirements vary significantly:
While specific mandates vary, most state legislation addresses one or more of these areas:
State AI education policy is evolving rapidly. We track developments as they happen. For the latest information on requirements in your state, contact our team.
Building a governance system is not a one-time project. It is an ongoing operational commitment. Here is a practical sequence for districts getting started:
This distinction matters because most districts have invested in the policy side but not the governance side. Here is how they differ:
Policy is the document. It states the district's rules, expectations, and boundaries for AI use. It is approved by the board, published for staff and parents, and updated periodically. A policy answers the question: What do we allow?
Governance is the system. It includes the technical controls, monitoring tools, reporting processes, and feedback loops that make the policy operational. Governance answers the question: How do we enforce, monitor, and improve what we allow?
A district can have a thorough, well-written AI policy and still have zero governance. If there is no mechanism to enforce the policy at the technical level, no way for teachers to translate it into classroom controls, and no reporting to verify compliance, the policy is aspirational. Governance makes it operational.
This is the problem Beni was built to solve. Policy Cards turn policy language into configurable technical controls. Teacher Controls give educators the ability to deploy those controls for specific lessons and assignments. Compliance reporting gives administrators real-time visibility. The policy stays in the boardroom. The governance runs in the classroom.
Beni is the execution layer that turns your district's AI policy into enforceable classroom controls. We are accepting Founding Partner applications for the 2026-27 school year.
Apply to Learn More