☁️Haven GRC - easier governance, risk, and compliance 👨‍⚕️👮‍♀️🦸‍♀️🕵️‍♀️👩‍🔬

The Rego policy library for AI compliance: 94 policies covering the EU AI Act, NIST AI RMF, FAA/EASA/ICAO aviation, FERPA, fair lending, and 10+ more frameworks.

Document ingestion with CUI detection, ITAR/EAR screening, PII/PHI protection, and audit trails with hash-chain integrity. HIPAA Safe Harbor coverage.

[WIP] A database of University of California employee wages.

Governed AI agents for education — 8 reference workflows on Amazon Bedrock with deny-by-default authorization, student-PII masking, human-in-the-loop enforcement, and tamper-evident audit trail aligned to FERPA, COPPA, IDEA/504, and ADA Title II. Built for K-12, community colleges, and universities.

AI + EdTech · Sovereign School OS — AI-native K-12 platform · winner, Tsinghua 清华大学 AIID (NetDragon 网龙)

Production-grade Claude Code skills, pedagogical frameworks, and AI workflows for K-12 educators. Built by a practicing literacy specialist. FERPA-safe. Ready for Monday.

Compliance enforcement middleware for voice AI pipelines: warm transfer state management, PII scrubbing, confidence-gated escalation, and HIPAA/FERPA/EU AI Act enforcement for Pipecat, LiveKit, and Twilio deployments.

Policy enforcement for AI agents in regulated environments (FERPA, HIPAA, GLBA, GDPR): framework adapters for CrewAI, AutoGen, LangChain, Semantic Kernel, Haystack

EdTech-specific profile of the AI Procurement Decision Card v0.3 vault contract. Names FERPA's 7 PII categories (34 CFR §99.3) + COPPA's 10 PI categories (16 CFR §312.2, 2025 refresh) as concrete data_vault_targets exemplars + per-category retention rules. Four-doctrine consent_basis_taxonomy. EdTech-readiness scaffolding, not certification.

FERPA/HIPAA/GDPR-compliant RAG patterns: identity-scoped retrieval, audit logging, and framework adapters for regulated enterprise AI

Policy-as-code for FERPA + Title IV: a deterministic guardrail that decides before any LLM speaks. Risk-tiered, citation-faithful, with an MCP server, OSCAL/SARIF exports, a GitHub Action, and a live web demo.

K-12 safe AI tutoring platform — privacy-first, fully offline, backend-enforced content filtering with parental oversight

Special education accommodations logging platform

Hash-chained event schema + reference verifier for AI tool reads of student records. Bridges CEDS + Ed-Fi semantics to the Kinetic Gain audit-stream. Enforces tokenization, FERPA §99.32 logging consistency, COPPA school-as-agent invariants, Decision Card refs. EdTech-readiness scaffolding, not certification.

Blind your papers locally. Grade them however you want. FERPA-compliant student work anonymization with local AI handwriting recognition via Qwen2.5-VL.

Profile of evidence-bundle-spec scoped to FERPA's 8 obligation families: annual notification (§99.7), school-official exception (§99.31), directory info (§99.37), consent (§99.30), records of disclosure (§99.32), amendment (§99.21), breach response, vendor procurement controls. EdTech-readiness scaffolding, not certification.

MCP server for AI Tutor Card disclosures. Six tools for procurement review, curriculum matching, and FERPA / COPPA compliance auditing of AI tutors. EdTech-flavored extension of the Kinetic Gain Protocol Suite.

FERPA-compliant document filter for Haystack RAG pipelines — identity-scoped pre-filtering before LLM context

FERPA-compliant document filter for Haystack RAG pipelines — identity-scoped pre-filtering before LLM context