Institutional Agreement

1. Parties

This Institutional Agreement (the “Agreement”) is entered into between InsightGrade (“InsightGrade”, “we”) and the educational institution identified in the signature block (the “Institution”). The Agreement takes effect on the date of the last signature.

2. Services

InsightGrade reads academic discussion posts and threads, classifies each post by learning depth (deep, surface, or social learning), generates a CAPITAL profile, produces thread-level summaries, performs a bias self-check, and returns a structured executive summary report. Output is generated support for scholarly judgement, not a substitute for instructor evaluation.

3. FERPA and school official designation

Content submitted by the Institution may constitute education records under FERPA. The Institution designates InsightGrade as a school official with a legitimate educational interest, operating under the Institution’s direct control. InsightGrade uses student information solely for authorized educational purposes, does not redisclose personally identifiable information, and may use de-identified data for research or product improvement in accordance with FERPA regulations.

4. Institutional control and responsibilities

The Institution obtains any consents or notices required by its own policies and applicable law, manages which personnel receive accounts, and may direct InsightGrade in writing to correct, export, or delete records associated with its account.

5. Data security and retention

Encryption in transit and at rest, need-to-know access controls, and logging of administrative access. Records are retained for the subscription term and deleted within thirty (30) days of a written deletion request or account termination, except where law requires longer retention.

6. Incident notification

InsightGrade notifies the Institution without undue delay, and within seventy-two (72) hours, of any unauthorized access to or disclosure of the Institution’s education records.

7. Subprocessors

Vetted providers for hosting, model inference, transactional email, and payment processing, each bound by confidentiality and data-protection obligations no less protective than this Agreement. The current subprocessor list is published on our Subprocessors page.

8. Fees and term

Fees follow the selected subscription plan and are billed through Paddle, InsightGrade’s merchant of record. The initial term is twelve (12) months, renewing unless either party gives thirty (30) days’ written notice of non-renewal.

9. Intellectual property

The Institution retains all rights in submitted content and grants InsightGrade a limited, non-exclusive license to host and process it solely to provide the service under this Agreement.

10. Warranties, liability, and governing law

Liability is limited to the fees paid in the twelve months preceding a claim, except for breaches of confidentiality or FERPA obligations. The Agreement is governed by the laws of the Institution’s home jurisdiction unless the parties agree otherwise in writing.

11. Notices and signatures

Notices to InsightGrade go to think@insightgrade.app. The PDF includes signature blocks for both the Institution and InsightGrade; InsightGrade countersigns and returns a fully executed copy.

How InsightGrade enforces FERPA controls

These safeguards are built into the platform itself, so the promises in this Agreement are enforced by the system, not only by the contract:

• Per-account data isolation. Every conversation, transcript, report, and usage record is scoped to a single account or to members of an approved institution. No other institution, account, or unauthenticated party can read them.
• Private, encrypted storage. Transcripts and signed agreements are stored in private storage that is encrypted in transit and at rest, and are reachable only through authenticated access rules.
• Use limitation by design. Submitted content flows only through the requested analysis — extraction, model inference, and report generation. It is never used to train models and is never shared beyond the vetted subprocessors listed in this Agreement.
• Institution-controlled access. Institutions manage their own roster — inviting and removing members at will — and can direct InsightGrade to export or delete their records, honored within thirty (30) days.
• Logged administrative access. Internal administrative access to institutional data is restricted and logged, supporting the access controls required under FERPA and 34 CFR 99.31(a)(1).

Subprocessors

As required by Section 7 of this Agreement, InsightGrade uses only the following vetted subprocessors to deliver the service. No other third party receives institutional or student data:

• Lovable (including Lovable Cloud). Application hosting, database, authentication, and AI inference gateway. Customer content is not used to train models.
• Paddle. Payment processing as Merchant of Record. Receives billing details only — never transcripts, reports, or student data.
• Fastmail. Transactional email delivery (notify.insightgrade.app), such as report-ready notifications and institutional invitations.

InsightGrade will update this list and notify institutions before engaging any additional subprocessor that would handle education records. The authoritative, current list lives on our Subprocessors page.

InsightGrade is the institution's service provider. Lovable acts as InsightGrade's contracted infrastructure and AI-processing subprocessor under a signed DPA that prohibits model training on customer personal data and defines retention and deletion obligations. Customers can read the full explanation and download the signed DPA.

This page summarises the agreement for review. The downloadable PDF is the version to sign and return.