The answers to the questions we actually get.

A struggling student usually touches several systems: a tiered-support tracker, a special-education compliance system, a 504 binder, an English-learner file, and the nurse’s records. Each asks for the same information, staff type it repeatedly, and the deadlines that matter legally end up in someone’s memory. CetusEd puts the journey on one record and the deadlines in the software.

School psychologists, special-education teachers, interventionists, nurses, English-learner staff, counselors, paraeducators, building administrators, and the district office — 26 built-in roles, each scoped to what it needs to see. The product holds 100+ forms, score-documentation and analysis for 50+ normed assessment batteries with a configurable catalog (a district can add another assessment it uses or refresh a configuration for updated norms), 23 curriculum-based probe types plus 22 behavior and SEL measures, a decision engine (RIOT/ICEL, exclusionary factors, dual discrepancy, the four-point rule), and the statutory clocks. The advanced analysis for SLD eligibility includes the pattern-of-strengths-and-weaknesses (PSW) pathway and the culture–language matrix (C-LIM). The platform page walks through all of it.

K–12 and exit. For grades 9–12 the record carries credit progress against the 24-credit framework, cumulative GPA, ELA and math graduation-pathway status, High School and Beyond Plan status with its statutory annual review (RCW 28A.230.090), and attendance/behavior/course early-warning signals — resolved into one on-track / at-risk read. Secondary transition starts at age 14 by default, with postsecondary goals and the Indicator 13 checklist; transfer-of-rights notice at 17; Summary of Performance at exit; age-out at the end of the school year a student turns 22. Shown on the platform page.

Yes — the product is the demo. Enter the app: it runs in your browser on this device, you set a passphrase on first run, and out of the box it sends nothing anywhere. No demo server, no credentials from us, no trial clock.

No — deliberately. Each engine produces a recommendation with its reasoning shown, and the team confirms it. Nothing in the software writes an eligibility determination on its own.

Neither, and not yet booked — Cloudflare holds SOC 2 Type II and ISO 27001 for the hosting layer, which says nothing about this application. The privacy page names the security-review items in the same words we use internally: the open one is the audit itself; three items that used to be open are closed — inline scripts are no longer permitted by the browser security policy, storage no longer falls back to unencrypted, and school-scope enforcement fails closed and is pinned by a build guard. The documentation an assessor would ask for is written and available now.

Three layers: a role decides what you can do; a scope decides which schools and students; a third control decides who may open sensitive categories such as medical records, custody orders, and immigration documents. A student record carrying no school assignment is hidden rather than shown. Support impersonation cannot target a higher-ranked user, cannot cross schools the actor does not supervise, and does not grant the impersonated user’s permissions.

Yes, hash-chained — an altered entry breaks the chain and raises a banner. It records FERPA §99.32 disclosure events (record views, document downloads, exports, copies), storing the student identifier and deliberately not the name.

OpenID Connect with PKCE against Microsoft Entra ID, Google Workspace, or Clever; the signature check is on by default and you can require SSO and block email login entirely. Sign-in is the only thing identity is used for — nothing reaches into Workspace or Microsoft 365 content. There is no analytics host and no external runtime request; charting, PDF generation, and all six selectable font families are served from the app’s own origin.

As normally installed, none receive student information. Cloudflare Pages serves the static files. A connector tier would run on your account; SSO uses your own identity provider. jsDelivr was removed as a subprocessor in July 2026 when the two JavaScript libraries were vendored and self-hosted.

There is no server to stand up and no database to provision: host the files yourself or use the hosted version, then import a roster file with field mapping. The application is self-contained, installs as a progressive web app, and works with no network connection. Deployment and training time have not been measured in a real district — the pilot produces those numbers.

Every step carries a short in-context guide, the assistant answers on any screen, and work auto-saves — built so a staff member can learn it without a manual.

Washington is building one under E2SSB 5263, with a pilot in 2027–28 and statewide launch in 2029–30, covering the IEP — not MTSS, 504, EL/ML, or health. CetusEd’s record is built on the shapes Washington already reports, so a handoff is a mapping problem rather than a rebuild. What that will actually take, including the state’s own stated technical requirements.

You already have it — on your devices, with standing exports in open JSON, CSV, and PDF. If the company stops, you lose future updates; the data and the working software stay yours.

Direct access to the person who built the product, with no ticket tiers — a real advantage at one district and an obvious limit at fifty. Pilot terms, including cost, are shared directly with each district that reaches out and quoted in writing before any decision. Nothing on this site quotes a price.

Three things, and they are the three we would raise from your side of the table. There is no completed pilot yet, so every claim about benefit is design intent rather than measured outcome. It has never run at scale — built against a simulated district of 20,317 students across 29 buildings, which is not two hundred people using it on a Tuesday morning. And the continuity question that comes with a very small company is real; the answer is that your data and your working software remain yours regardless.