MagicSchool AI publicly claims FERPA and COPPA compliance and signs district-level data privacy agreements, which is more than most consumer AI tools offer. But FERPA compliance is two-sided: the vendor posture is one half, how a school SLP uses the tool is the other half. In a 2024 community survey (n=16) of parents, school SLPs, OTs, and SPED teachers, 94% spent 30 or more minutes on a single social story and many reached for AI to cut that time. This article walks through the FERPA checks to do before you type a student's name.
Why does FERPA matter when you use AI to write a social story?
FERPA (the Family Educational Rights and Privacy Act) covers any record that is directly related to a student and maintained by a school. The moment you put a student's first name into a generated story, that story is potentially an educational record. The risk is not the writing. The risk is that some AI tools log your prompts, use them to train future models, or share them with subprocessors that do not have a data agreement with your district.
School SLPs and pediatric OTs in school settings fall under FERPA, not HIPAA. If you work in a private clinic, the framework changes. This article focuses on school-based practice.
Does MagicSchool AI say it is FERPA compliant?
Yes. MagicSchool's trust pages and vendor listings state FERPA, COPPA, and SOPPA compliance, and the company signs district-level data privacy agreements on request. Many state EdTech approval lists (Texas, Florida, and others, depending on the year) include MagicSchool, and the company reports being used in over 100 named districts. None of that, however, means you can skip your own district's vendor approval process.
How does MagicSchool compare to other AI tools school SLPs reach for?
The practical comparison most SLPs need:
| Tool | Vendor FERPA posture | What you should still check |
|---|---|---|
| MagicSchool AI | FERPA, COPPA, SOPPA stated; signs DPAs; education-only audience | Confirm your district has a signed DPA on file |
| ChatGPT (consumer) | Not designed for school PII; consumer terms apply | Avoid student PII entirely; use placeholder names |
| ChatGPT Edu / Enterprise | Stronger; data not used for training by default | Confirm your district licensed Edu or Enterprise, not the free tier |
| Claude (Anthropic) | Consumer terms; enterprise tier offers stronger protections | Same as ChatGPT; use the tier your district actually licensed |
| Boardmaker (Tobii Dynavox) | Long-standing district vendor; symbol library, not generative AI | Less FERPA exposure since no AI prompt is sent |
| Emoquest | Education-focused; privacy posture is being finalized in beta | Private beta; review current data terms before classroom use |
The pattern is consistent across categories. Education-built tools are designed for student data. Consumer tools are not. The question is not whether AI is allowed in your district. It is whether the specific tool you are using has the right paperwork in place.
From the same 2024 community survey: "Getting suitable pictures is 90 percent of the work." Most school SLPs do not pick MagicSchool, ChatGPT, or any other tool for FERPA reasons first. They pick whatever shortens that 90 percent. FERPA becomes an afterthought, which is the failure mode this article exists to prevent.
What should a school SLP actually check before typing a student's name?
A short pre-flight checklist that takes 5 minutes:
- Is the tool on your district's approved EdTech vendor list? If you do not know, ask your tech coordinator. Most districts maintain one through services like LearnPlatform or 1EdTech.
- Is there a signed DPA on file for your district? Vendor-level FERPA compliance is not the same as a district contract.
- Are you logged in with your district account or a personal one? District accounts route through your district's privacy posture; personal accounts do not.
- Are you minimizing PII? Use first names or initials only. Skip the diagnosis. Save the story file in your district drive, not a personal Google Drive.
- Did you opt out of training-data use where the tool offers it? Most education tiers default to off, but it is worth checking the settings once.
What does an evidence-based social story look like, whatever tool writes the draft?
The text engine matters less than the methodology. Social narratives are listed as an evidence-based practice for autistic K-12 students by the AFIRM Social Narratives module (FPG, UNC) and the National Clearinghouse on Autism Evidence and Practice (NCAEP). The 2024 randomized trial of social stories in mainstream primary schools (Wright et al., BJPsych Open) found small but cost-saving effects when stories were delivered with fidelity. The fidelity matters more than the generator.
Frequently Asked Questions
Does MagicSchool AI say it is FERPA compliant?
Yes. MagicSchool publicly states FERPA and COPPA compliance, signs district-level data privacy agreements, and is listed on several state-approved EdTech vendor pages. FERPA compliance is a shared responsibility, though. The vendor's posture is one half. How the SLP uses the tool is the other half.
Can I type a student's name into MagicSchool AI?
Use first names or initials only, and only after your district has a signed data privacy agreement on file. Avoid combinations that turn first name plus disability plus school into identifiable PII. When in doubt, write the story with the placeholder name "the student" and find-and-replace locally.
Is MagicSchool safer than ChatGPT for school SLPs?
Generally yes for school use, because MagicSchool ships an education-focused privacy posture (FERPA, COPPA, signed DPAs) and ChatGPT consumer does not. ChatGPT Enterprise and ChatGPT Edu both improve the picture, but most school SLPs have a consumer ChatGPT account, not the enterprise tier.
What is a data privacy agreement (DPA) and why does it matter?
A DPA is a written contract between a vendor and a district that defines what student data is collected, how it is used, how long it is kept, and what happens on deletion. A vendor can be FERPA aware without your specific district having signed one. Always check the district's vendor list before using a new AI tool.
Are AI-generated social stories themselves an educational record?
If the story names the student or describes their behavior, yes. The file becomes an educational record once it is attached to the student, regardless of whether AI generated it. Store it in your district drive, not a personal Google account, and follow your district's retention rules.
What if my district has not approved any AI tool yet?
Draft the story with placeholder names and generic details in a tool you are allowed to use, then localize it in your district's word processor with the student's actual name. This keeps PII out of the AI prompt entirely and is the lowest-risk path while approvals are pending.
One approach for school SLPs short on time is to keep a 5-tool stack: a methodology checklist (Carol Gray ratios), a slide template you reuse, a folder of stock photos sorted by scenario, an AI text drafter (MagicSchool, ChatGPT Edu, Claude, or Emoquest for one-sentence-in story output), and a delivery format your district already uses (Google Slides or PDF). Whichever tool you pick, the FERPA checks come first. The story can wait the 5 minutes.