AI Vendor Due Diligence for Schools
One tool, one decision. A structured review of a specific AI product before a school buys it, renews it, or widens its use, covering what the vendor can evidence, what the school is agreeing to oversee, and how the decision gets written down.
Request a consultationWhen a review is needed
Most schools do not need to review everything. They need to review at four moments, when the answer to "what did we agree to?" changes.
Before a first purchase
A new tool is proposed by a teacher, a department, or a pilot group and nobody has yet asked what it does with student information.
At renewal
An existing agreement is coming up and the product now includes AI features that were not part of the original decision.
Before expanded use
A tool approved for one classroom, grade band, or department is about to move school-wide or district-wide.
After a question arrives
A family, board member, or staff member asks how a specific tool works and the answer is not currently on paper.
The evidence request
Send one list, once, early. What comes back, and what does not, is the substance of the review.
- A written description of what the AI feature does and where it sits in the product.
- Documentation of what data the tool collects, including anything entered as free text.
- Whether school or student content is used to train or improve models, and how that is controlled.
- Sub-processors, hosting locations, and retention and deletion practices.
- Security documentation the vendor already maintains, in whatever form exists.
- Accessibility information and any known limitations of the AI output.
- Named contacts for incidents, questions, and contract matters.
Decision questions
Six angles on the same product. A tool can be strong instructionally and still fail on oversight, and it is better to know which before signing.
Instructional fit
What problem does this solve that the school cannot already solve, and how will staff know whether it is working?
Student-data handling
What categories of student information reach the tool, who can see them, and how long do they persist?
Contract and terms review
What do the terms say about AI features, data use, and change notice? Your counsel reviews the agreement itself; this review prepares the questions.
Oversight
Who reviews output, who handles a complaint, and how is a problem escalated once the tool is in daily use?
Implementation
What training, configuration, and default settings are required before the first student uses it?
Records
Where does the decision live so the next leader can find it, and who is responsible for revisiting it?
Four possible outcomes
A review that can only say yes is not a review. Naming the four outcomes in advance makes the middle two usable. Where a decision turns on how much exposure a use carries, a school AI risk assessment is the natural next step.
Proceed
Evidence supports the use as described and the oversight already exists. The reasoning is recorded.
Proceed with conditions
Adoption goes ahead with named configuration limits, a narrower scope, or a review date attached.
Defer
Evidence is incomplete. The request pauses pending specific documentation, not an indefinite wait.
Decline
The use or the data handling does not fit what the school is prepared to oversee. The reason is written down.
The documented decision record
A short record is worth more later than a long report. It names the product and version reviewed, the intended use and scope, the evidence received and missing, the outcome and any conditions, who decided, and the date the decision is revisited.
That record is what lets a school answer a question months later without reconstructing the reasoning from memory, and it is what makes a renewal review quick rather than a repeat of the whole exercise.
Next steps for leadership and procurement
One review is useful. A repeatable path is what keeps the next twenty requests from becoming twenty separate debates. That path is part of the standing structure covered in AI governance for school districts.
Procurement
Fold the evidence request into the standard intake so it arrives before, not after, a purchase discussion.
Leadership
Agree who can approve which categories of tool, and what threshold sends a request to a wider group.
Records
Keep one place where vendor decisions, conditions, and review dates are held together.
NeuralEdge can structure the evidence request, facilitate the review, document findings, and advise on next steps. We do not approve or certify vendors, and this work does not substitute for review by your own counsel or local policy authority.
Frequently asked questions
Three questions schools raise before commissioning a vendor review.
- Does a review mean a vendor is approved?
- No. A review produces documented findings and a recommendation your leadership acts on. NeuralEdge does not approve, certify, or endorse vendors, and the decision remains the school's.
- How is this different from a district governance engagement?
- This work is scoped to one product decision: a purchase, a renewal, or an expansion. Governance work sets the standing structure that decides such requests over time.
- What if the vendor will not provide the documentation?
- That is itself a finding. Schools frequently defer a decision until specific evidence arrives, and the absence of documentation is recorded alongside the rest of the review.
Video briefing
Before Your School Says Yes to an AI Vendor
For technology leaders, curriculum leaders, procurement teams, and school leadership reviewing a new tool, renewal, or expanded use.
This briefing is general information, not legal advice. Your school counsel and policy authority should review obligations that apply to your organization.
Request a consultation
Tell us which tool is under consideration and whether the decision is a purchase, a renewal, or an expansion.
What happens next: a member of our client team reviews your inquiry and follows up to arrange a conversation.
The information on this page is general information about AI vendor review and governance practices. It is not legal advice, and it does not create a professional or attorney-client relationship. Consult your own counsel about obligations and agreements that apply to your organization.