Open the Console Prepare evidence for a school buyer

Does the 2025 COPPA amendment apply to our ed-tech tutor product?

If your AI tutor is directed to children under 13 or you have actual knowledge it collects personal information from under-13 users, COPPA applies — and the FTC's 2025 amended Rule tightens consent, data-retention limits, and disclosure obligations, including…

register 09 · Compliance pins· COPPA
01 ·

Answer.

Education / student-data rule · COPPA.

If your AI tutor is directed to children under 13 or you have actual knowledge it collects personal information from under-13 users, COPPA applies — and the FTC's 2025 amended Rule tightens consent, data-retention limits, and disclosure obligations, including around third-party (e.g. AI model) data sharing. The school-authorization exception may apply in some classroom contexts but is narrow. Planisphere measures model behaviour and can be configured to avoid ingesting student PII; it does not determine your COPPA applicability, which is a legal question.

02 ·

The mark behind the answer.

COPPA protects students — their records, their civil rights, their access. When an AI sits in an eligibility, accommodat…

under-13 data · 2025 amended Rule · ed-tech consent & retention.

→ Full reference for COPPA

03 ·

More on COPPA.

Other questions this mark answers.
How do we prove an under-13 AI tutor didn't retain student data after the 2025 COPPA Rule? Is there a COPPA school-authorization exception for ed-tech in 2026?

Try COPPA with a free test key.

Start with the free sandbox. Planisphere measures model behaviour and emits a reproducible, sha-pinned record — it does not certify, file, or give legal advice.

Open the Console Prepare evidence for a school buyer COPPA reference
API ·

When COPPA asks for proof, hand over records — not assurances.

record the duty · seal the receipt · verify offline

Planisphere records each duty event — an output marked, a disclosure shown, a review made — and seals it into a receipt that verifies offline against our published keys. You send hashes, never content. A record is evidence a third party can check; it is not a certification and not a legal determination.

Open the Console Read the Docs Read the capability briefing

See how a record is checked