K-12 AI Tools Policy Data, Ready to Build Into Your Filter
Each of 11,853 AI tools carries a school-ready decision: block, allow with controls, or allow. The reason, 13 risk factors and the rule behind it travel with every row of the feed.
Filter vendors, MSPs, classroom-management platforms and district IT teams load it as data. Schools receive a policy kit that says the same thing the filter enforces.
The K-12 AI feed in numbers
Counts as of October 2026. The tool list grows as new AI tools appear.
One AI policy layer for every product a school touches
Districts no longer ask only whether a site is safe. They ask which AI tools students may use, under which conditions, and why.
Web filter vendors
Ship a K-12 AI preset that blocks, controls or allows each AI tool by domain. Every decision arrives with a reason your admin console can display.
MSPs serving districts
Apply one reviewed AI policy across every school you manage. Hand each district the matching policy documents instead of writing them yourself.
Edtech and classroom management
Show teachers which AI tools a class may open and which stay closed. Use the subcategory rules to keep tutoring and reading support available.
District IT teams
Load the verdicts into the filter, the Chromebook console and the MDM. Bring the board a policy whose rules match what the network enforces.
Schools need a decision for every AI tool, and a reason they can defend
A blanket block removes tutoring, translation and read-aloud support from the pupils who need it most. A blanket allow opens the door to essay generators, companion chatbots and deepfake apps.
Parents start with student data
The most common question is whether a tool learns from what children type into it. As of October 2026, 671 AI tools in the database state that they train on user data.
Another 215 do so by default unless the user opts out.
States are writing it into law
A growing number of states expect each district to adopt a written AI policy. Some, such as Florida, add parental consent before a student uses AI.
Auditors ask why, not only what
A list of blocked domains says nothing about the reasoning. Boards, auditors and parents want to see the rule that produced each decision, and the feed carries it.
What state and federal rules ask of schools
This summary reflects rules on AI in K-12 schools as reported in October 2026. Check the current text with counsel before relying on any of it.
Florida
State Board of Education rules approved in September 2026 require parental consent before a student uses an AI product. Districts must also offer an alternative that does not use AI.
AI that simulates an emotional relationship with a student is barred, and staff must be able to turn AI systems off at once. District policies are due by 1 July 2027.
Ohio
Every district, community school and STEM school was required to have an AI policy in place by 1 July 2026. The state published a template policy that districts can adapt.
Tennessee
Local school boards and public charter schools must maintain a policy on AI use. They must also report that policy.
Oklahoma
Each district needs a written AI policy before the 2027-28 school year. It must name approved and prohibited uses and set out how student data is protected.
Parents can opt their child out of AI tools that students use directly.
California and Colorado
Both states have laws on companion chatbots and minors. California signed its law in September 2026, and Colorado's applies from 1 January 2027.
Federal
Bills on AI companions for minors are before Congress, and the amended COPPA rule has applied since April 2026. Every K-12 verdict in the feed already blocks AI companions.
Five parts, one consistent policy
The database says what each AI tool is and how it treats data. The rules turn that into a verdict, and the kit turns the verdicts into documents a board can adopt.
AI tools database
11,853 AI tools in 18 categories and 165 subcategories, rebuilt every day.
K-12 policy rules
A verdict and its reason for each tool, from 18 category rules and 165 subcategory rules.
K-12 AI Policy Kit
Board policy, parent letter, staff and student guidance, and a tool review checklist.
13 risk factors
Data sovereignty, abusive purpose and training on user data, plus 10 factors from vendor terms.
AI apps for MDM
2,101 AI apps for iPad, iPhone and Android, each with its app ID.
Three verdicts, each with the reason attached
Every one of the 11,853 tools lands in one of three verdicts. The split below is from the build of 17 October 2026 and moves as tools are added.
Block
Blocked on school networks and devices. Not used for schoolwork on any device, school-owned or personal.
Allow with controls
Usable only with a school-managed account and a signed data-privacy agreement. A teacher approves it for the class first.
Allow
Low-risk tools that do not produce open-ended text, such as mind-mapping. Safety tools such as content moderation sit here too.
How each verdict is reached
The same five steps run for every tool, in the same order. Your product can show any step to the admin who asks.
Hard blocks first
An abusive purpose, a high risk rating or high data-sovereignty exposure ends the review at block. Nothing later can lift it.
Baseline from the rules
Each subcategory label brings its K-12 rule, or its all-sector rule if there is no K-12 one. The strictest wins, and the category default fills any gap.
Tighten for data and risk
Training on user data by default adds two steps toward block. Training unless users opt out, medium risk and medium sovereignty exposure each add one.
Relief for AI-enabled products
An established product that has added AI features is controlled rather than blocked. A hard block from step 1 is never relieved.
Relief for education tiers
When training was the only reason for a block, a vendor tier for schools that does not train earns allow with controls. That verdict applies to the education tier only.
Rows from the verdict file
These rows appear as the feed delivers them, reason text included.
| AI tool | K-12 verdict | Reason in the feed | Trains on user data |
|---|---|---|---|
| ChatGPT | Block | General assistants & chatbots (K-12 rule) | Trains unless opted out |
| Claude | Block | General assistants & chatbots (K-12 rule) | Trains unless opted out |
| Microsoft Copilot | Allow with controls | General assistants & chatbots (K-12 rule); AI-enabled platform, control rather than block | Trains by default |
| Grammarly | Allow with controls | Grammar, style & proofreading; trains unless opted out; AI-enabled platform, control rather than block | Trains unless opted out |
| illumi | Allow | Mind-mapping & diagramming (K-12 rule) | Does not train |
| Sightengine | Allow | Content moderation | Does not train |
Microsoft Copilot shows step 4 at work: the chatbot rule says block, but an established platform with added AI is controlled instead. Grammarly shows step 3 and step 4 together.
18 category defaults for K-12, with the thinking behind each
Each category starts from a K-12 default. Subcategory rules then open what schools need inside a stricter category, such as captions inside audio.
| Category | K-12 default | Why |
|---|---|---|
| Education & Learning | Controls | Tutors, quiz makers, course builders and grading tools are made for schools. The vendor still signs a student data-privacy agreement. |
| Code & Development | Controls | Computer science is a K-12 subject. Code assistants are now part of how students learn to program. |
| Productivity & Collab | Controls | Documents, slides and task boards are tools schools already run. Staff and older students use them daily. |
| Design, 3D & Creative | Controls | Design, CAD, 3D and game making are taught in class. The teacher picks which tools a class uses. |
| Robotics & Embodied AI | Controls | Robot kits and computer vision projects belong in STEM lessons. Teaching value is high and risk is low. |
| Security & Detection | Controls | Security and fraud tools are for staff. Detectors for AI content, deepfakes and moderation are allowed outright. |
| Text & Language | Block | Open text generators can write the whole essay. They also show minors unfiltered output and collect personal details at sign-up. |
| Image & Visual | Block | Open image generators are the easiest route to explicit or hurtful pictures of real people. Classmates are often the target. |
| Video | Block | Text-to-video, avatars and dubbing create synthetic footage of real people. The harm matches image tools and looks more real. |
| Audio, Voice & Music | Block | Voice cloning and voice changers make impersonation and bullying easy. Speech-to-text and text-to-speech are opened as assistive technology. |
| Lifestyle & Entertainment | Block | Companion chatbots, dating, astrology and games carry the highest risk for children. The concerns are emotional dependence, sexual content and data collection. |
| Search, Knowledge & Docs | Block | Answer engines hand over a finished answer in place of sources. Chat-with-PDF tools summarise the set reading for the student. |
| Models & Infrastructure | Block | Raw AI APIs and hosting platforms skip the safety layers of consumer apps. A student with an API key gets unfiltered output. |
| Agents & Automation | Block | Agents log in, browse and send data on their own. No person checks each action before it happens. |
| Data, Analytics & Research | Block | Business analytics and scraping tools have no student use. They often take in files that could hold student records. |
| Business & Vertical | Block | Software for finance, HR, legal and healthcare professionals. None of it is designed for pupils. |
| Marketing, Sales & SEO | Block | There is no classroom use. These tools gather contact data and send messages in bulk. |
| Customer Support | Block | Helpdesk bots and call-centre agents are business software. Students have no reason to use them. |
A selection of the 165 subcategory rules
Of the 165 subcategories, 112 are blocked, 48 are allowed with controls and 5 are allowed. The rows below show how learning and accessibility stay open inside stricter categories.
| Subcategory | K-12 rule | Why |
|---|---|---|
| Subtitles & captions | Controls | Gives deaf and hard-of-hearing pupils access to spoken content. |
| Text-to-speech | Controls | Reads text aloud for pupils who struggle with reading. |
| Speech-to-text & transcription | Controls | Assistive support for pupils with dyslexia or limited motor control. |
| Translation & localization | Controls | Helps pupils working in a second language, with controls that keep personal data out. |
| AI tutors & personalized learning | Controls | Central to classroom use, provided there is a privacy agreement and design suited to the age group. |
| Mind-mapping & diagramming | Allow | Organises the student's own ideas, with little data or content risk. |
| Writing & long-form | Block | Writes complete essays, which is the main academic integrity problem. |
| Paraphrasing | Block | Rewords copied text so it slips past plagiarism checks. |
| AI companions & character chat | Block | Risk of emotional dependence and sexual role-play with minors, so it is blocked in every sector. |
| Face swap & effects | Block | Makes deepfakes directly, so it is blocked in every sector. |
Documents for the schools you serve, matching the filter
Every document uses the same three verdicts and the same five steps as the rules. What the school board signs is exactly what your product enforces.
AI Acceptable Use Policy
Board-ready text in 14 sections, plus two annexes.
- Purpose, scope and definitions
- The three verdicts explained
- How tools are classified, with a rating guide and worked examples
- Conditions for allow with controls
- Student data and privacy under FERPA, COPPA and CIPA
- Academic integrity and staff use
- Requests for new tools and exceptions
- Roles, violations and policy review
- Annex A: K-12 category rules
- Annex B: Approved AI Tools List
Letter to parents
A single page in plain language.
- The three decisions, with examples
- How student data is protected
- Consent for children under 13
- How AI fits into schoolwork
- What parents can do at home
Staff guidance
Six sections for teachers and school staff.
- What you can use
- Using an approved tool
- What never goes into an AI tool
- Asking for a new tool
- Handling suspected AI misuse fairly
- What to do when something goes wrong
Student guidelines
Two versions written for different ages.
- Grades K-5: 8 short rules and a line for the student's signature
- Grades 6-12: 9 guidelines on approved tools, the AI level for each assignment, disclosure, privacy, respect, fact checking, wellbeing and reporting
Tool review checklist
One page for IT and curriculum staff reviewing a request.
- Describe the tool
- Check the hard blocks
- Set the baseline rule
- Tighten for data use and risk
- Apply relief and record the verdict
Rules and ready-to-import files
The rules as data and the verdicts as filter files.
- Category rules, subcategory rules and decision layers
- Google Admin blocked URLs
- Chrome policy JSON
- DNS RPZ zone and hosts file
- Block, allow and controls domain lists
In the kit's own words
Short passages quoted from the kit documents. District names and contacts are placeholders the school fills in.
It has three goals, in this order:
- Protect students, who are minors.
- Protect academic integrity.
- Keep vetted, useful tools available for teaching and learning.
An AI tool that cannot be placed in any category is blocked until it is reviewed. A tool with the verdict allow with controls may be used only after it has been added to the Approved AI Tools List.
AI chatbots are not a substitute for a school counselor. AI companion, character and wellness chatbots are blocked.
Tools built to disguise AI writing, to rewrite copied text past plagiarism checks, or to answer online tests for the student are blocked.
People make decisions about students. Grades, placement, discipline, special education and other decisions about students are made by staff, not by AI.
If a tool is not on the list, treat it as blocked until it has been reviewed.
Reviews go faster when the vendor has an education tier that does not train on user data, signs the data-privacy agreement, says where data is stored and supports district sign-in.
For each assignment, teachers tell students whether AI may be used and how. Students who use AI say so.
Remind them that a chatbot is not a friend or a counselor.
I keep private things private.
I never type my full name, address, phone number or passwords into AI. I never put in pictures of me or other people.
Check what AI tells you.
AI can be wrong, can be biased and can make up sources. Check facts against reliable sources, and ask yourself whose view might be missing.
How each AI tool handles the data students give it
Three core risk axes are scored for every tool. Ten more factors are read from each vendor's published terms, and each one carries the quoted clause and a link to the vendor's terms page.
1. Data sovereignty
Where data is stored and processed, and which jurisdiction applies to it.
2. Abusive purpose
296 tools are flagged as NSFW, deepfake, uncensored or nudify tools. Each one is a hard block.
3. Trains on your data
Whether the consumer tier uses what people type to train the vendor's AI.
Ten factors from vendor terms
4. Opt-out available
Can a user stop their data being used for training?
5. Opt-out scope
Does opting out cover all data, or only data from now on?
6. Enterprise no-training
Are paid and education tiers excluded from training?
7. API no-training
Is traffic through the API kept out of training?
8. Feedback exception
Are ratings and thumbs up or down still used for training?
9. Retention
How long prompts are kept for monitoring.
10. De-identified use
May data labelled anonymised still be used?
11. Human review
May vendor staff read conversations?
12. Zero-retention option
Is there a mode that stores nothing?
13. Subprocessor training
May third parties train on the data?
Training on user data across 11,853 tools
Counts as of October 2026. Silence matters too: under the K-12 rules, a tool that does not say whether it trains cannot get a plain allow.
One record, as it arrives
domain chatgpt.com trains_consumer_default yes optout_available yes optout_scope future_only feedback_exception yes deidentified_use permitted human_review yes enterprise_no_training yes api_no_training yes k12_verdict block (General assistants & chatbots, K-12 rule)
Every field in the full record also holds the vendor's clause and the link to its terms. Your product can show that clause to a district that asks.
The same policy on iPads, iPhones and Android tablets
A web filter does not see an AI tool used as a native app. The app list carries the same tools and categories, in formats the device management a school already runs can import.
AI apps
Each one linked to its AI tool and category.
Android apps
Listed with their package names.
iOS and iPadOS apps
Listed with their bundle IDs.
New app checks
The app stores are checked every week for new AI apps.
Import files included
Microsoft Intune
Restricted app lists for iOS and for Android, ready to import.
Jamf
A configuration profile that applies the AI app restrictions.
Android Management API
A blocked-apps list in the format the API expects.
Plain ID lists and 18 category files
Bundle ID and package lists for any other system. One file per category lets a school block by type.
As of October 2026. App counts change as new AI apps are found each week.
Underneath it all: 11,853 AI tools, classified and kept current
The AI tools set is drawn from our 120 million domain web filtering database. It shares the same daily review of new domains that keeps the main categories current.
18 categories, 165 subcategories
From AI tutors and captioning to companions and face swap. A school can allow types of AI rather than choosing all or nothing.
Rebuilt every day
About 300,000 newly registered domains are reviewed daily. New AI tools enter the list and receive a K-12 verdict in the same build.
Every enforcement point
Web filters, firewalls, DNS filters, Chromebooks and MDM read from one source. A tool blocked on the network stays blocked on the tablet.
Delivery formats
CSVJSONhostsEDLPACRPZDNS filter imports
Where each part plugs into your product
| Your product | What you load | What the school sees |
|---|---|---|
| Web filter or firewall | Block, controls and allow domain lists, or the full verdict file | A K-12 AI preset with a reason on each blocked AI tool |
| DNS filter | RPZ zone or hosts file built from the verdicts | AI tools blocked at the resolver for every device on the network |
| Chromebook management | Google Admin blocked URLs and Chrome policy JSON | The same AI decisions on managed Chromebooks, at school and at home |
| MDM for tablets and phones | Intune, Jamf and Android Management API files | AI apps restricted in line with the web verdicts |
| Classroom management or LMS | Verdicts, reasons and risk factors per tool | Teachers see which AI tools a class may use, and under which conditions |
| MSP portal | Rules as data plus the policy kit | A ready AI policy per district that matches what the MSP enforces |
Common questions from vendors and districts
What exactly do we license?
A K-12 verdict of block, allow with controls or allow for each of the 11,853 AI tools in the database as of October 2026, with the reason behind it. You also receive 13 risk factors per tool, the rules as data, AI app lists for MDM and the K-12 AI Policy Kit for the schools you serve.
Can our customers or our product change the rules?
Yes. Every category rule and subcategory rule comes as data with its rationale, so a product or a district can move any rule and see which tools change verdict.
Does the K-12 policy simply block all AI?
No, tutoring, accessibility, coding and translation tools are allowed with controls, and a small group of low-risk tools is allowed. Open chatbots, AI companions, deepfake tools and essay writers are blocked.
How do the risk factors change a verdict?
Training on user data by default makes a verdict two steps stricter, and training unless users opt out makes it one step stricter. Medium risk or medium sovereignty exposure each add one step, while abusive purpose, high risk and high sovereignty exposure are hard blocks.
How fresh is the feed?
The AI tool list and the K-12 verdicts are rebuilt every day. App stores are checked weekly for new AI apps, and vendor terms are checked again when they change.
Where can the verdicts be enforced?
In web filters and firewalls through domain lists, and on Chromebooks through Google Admin blocked URLs and Chrome policy. DNS filters use the RPZ and hosts files, and tablets and phones use the Microsoft Intune, Jamf and Android Management API files.
Give every school you serve a ready AI policy
Tell us how your filter, platform or MSP service reaches schools. We will show how the K-12 verdicts, rules and policy kit fit into it.
Product names used in the examples on this page are trademarks of their respective owners. Their use here identifies the tools and does not imply endorsement or affiliation.