⚠
Critical for districts: When your teachers say they're "using ChatGPT," they almost certainly mean chatgpt.com. The consumer product which has no DPA, no district controls, uses input data for model training by default, and prohibits under-13 use. ChatGPT for Teachers is a different product that most teachers have never heard of. This is your highest-priority shadow AI risk.
The three ChatGPT products
OpenAI has built three distinct products under the ChatGPT name. They look nearly identical from the outside. same interface, same domain. But have completely different compliance postures. Which version your teachers are actually using is the first question every district needs to answer.
Product
Key compliance facts
District verdict
Consumer ChatGPT
Free / Plus / Team
chatgpt.com
No DPA available. No district controls. Data used for model training unless users individually opt out (most don't). Under-13 use violates COPPA. No SDPC agreement. No audit logs. No way for districts to restrict access by role.
✗ Not Appropriate
ChatGPT for Teachers
Free for U.S. K-12 educators through June 2027
Requires domain claim
Data not used for training by default. Student DPA available. SDPC agreement signed. Requires districts to claim their domain and configure an admin workspace. Teacher-facing only. Not for direct student use. Appropriate with proper district setup.
⚠ Conditional
ChatGPT Edu
Enterprise. Requires institutional agreement and budget.
SOC 2 Type II. SAML SSO. Custom data retention. District admin console. No training on org data. Full audit logs. The most defensible option for larger districts willing to pay for it.
✓ Suitable
Compliance matrix
Compliance factor
Consumer
For Teachers
Edu
DPA available
✗ No
✓ Yes
✓ Yes
SDPC agreement signed
✗ No
✓ Yes
✓ Yes
Data NOT used for AI training
✗ Training default on
✓ Default off
✓ Always off
District admin controls
✗ None
⚠ Limited
✓ Full console
Domain claim / teacher verify
✗ No
✓ Required
✓ Required
SOC 2 Type II
✗ No
✗ No
✓ Yes
Appropriate for under-13
✗ No (COPPA)
✗ Teacher-only
⚠ With config
Audit logs available
✗ No
⚠ Limited
✓ Yes
The shadow AI risk specific to ChatGPT
ChatGPT is the highest shadow AI risk in K-12. Not because OpenAI has bad intentions, but because name recognition creates dangerous version confusion. When a colleague says "I use ChatGPT," a teacher hears "ChatGPT is approved." The reality: they may be using ChatGPT for Teachers (configured by their own district), while the new listener goes home and opens chatgpt.com on their personal browser.
💡
The bookmark problem: Most teachers bookmarked chatgpt.com two or three years ago. Even if your district has configured ChatGPT for Teachers and communicated it to staff, teachers following old bookmarks or sharing links with colleagues will land on the consumer product. Domain verification and repeated, explicit communication are essential.
Common real scenarios that create FERPA exposure: a teacher pasting a student's essay with a note about their IEP accommodations; a teacher asking for grade comment suggestions referencing a specific student's challenges; a teacher describing a student's behavioral patterns to get classroom management advice. All of these happen regularly. None can be undone.
District action steps
If you want to allow teachers to use ChatGPT, the path forward is migration to ChatGPT for Teachers. Not prohibition. Here is what that migration requires:
1
Claim your school domain
Go to the OpenAI education portal and claim your district's domain. This is required before ChatGPT for Teachers will work for your staff. OpenAI verifies ownership via DNS or admin email confirmation.
2
Configure your workspace settings
In your admin workspace, ensure "Improve model for everyone" is turned OFF for all domain users. This is the setting that controls whether teacher inputs are used for model training.
3
Sign the Student DPA
Have your district sign the ChatGPT for Teachers Student DPA through OpenAI's education portal. This establishes the legal framework required for compliant teacher use.
4
Communicate clearly and repeatedly
The approved product is accessed through the workspace link you provide. Not chatgpt.com. Make this prominent. Repeat it at every staff meeting. Many teachers have years of consumer ChatGPT muscle memory to override.
5
Explicitly prohibit direct student use
ChatGPT for Teachers is teacher-facing only. For student-facing AI tutoring needs, see our assessments of Khanmigo and SchoolAI.
📋
COPPA note (April 2026): Revised COPPA rules take full effect April 22, 2026 and add requirements for tools used with children under 13. Even with a DPA, ChatGPT for Teachers compliance documentation covers teacher use only. Ensure your use case is teacher-facing if relying on these terms.
What we cannot verify
- OpenAI's privacy policies have changed multiple times in 24 months. Always verify current terms directly with OpenAI's education team before finalizing any procurement decision.
- We have not independently audited OpenAI's technical implementation of their "data not used for training" setting. We rely on published documentation and SDPC agreement commitments.
- Free availability of ChatGPT for Teachers is guaranteed through June 2027. Post-2027 terms are unknown.
- Domain verification and workspace configuration steps may change as OpenAI updates the product.
Disclaimer: This assessment reflects independent research based on publicly available information as of March 2026. It does not constitute legal advice or a guarantee of FERPA compliance. Always verify current documentation with the vendor and consult your district's legal counsel before procurement decisions.