1EdTech Caliper Analytics
The 1EdTech standard for learning-activity events, one of the interoperability standards a product may support in the self-disclosure.
Library
The ICAA Documentation Library: standards, implementation guidance, model practices, templates, assessments and training. Public documents are free to download; the rest is included with membership.
Standards
The operational standards every ICAA workflow is evaluated against.1EdTech LTI 1.3 (Learning Tools Interoperability)
The 1EdTech standard for launching a tool from a learning platform with a secure, standards-based sign-in; LTI 1.3 with LTI Advantage is what the self-disclosure and…
1EdTech OneRoster
The 1EdTech standard for exchanging rosters, enrollments and grades between a student information system and a product; versions 1.1 and 1.2 are the self-disclosure's options.
Public
Open: 1EdTech OneRoster
1EdTech QTI (Question and Test Interoperability)
The 1EdTech standard for exchanging assessment items and results, named with OneRoster and LTI in the interoperability control.
ADA: Americans with Disabilities Act
The Department of Justice's ADA site, including the Title II rule that sets WCAG 2.1 AA as the accessibility standard for state and local government web…
CIPA: Children's Internet Protection Act
The FCC's guide to the internet-safety requirements that schools and libraries receiving E-rate discounts must meet.
COPPA: Children's Online Privacy Protection Rule
The FTC rule on collecting personal information online from children under 13: notice, verifiable parental consent and the school-consent arrangement a product used in class relies…
Ed-Fi Data Standard (Ed-Fi Alliance)
The Ed-Fi Alliance's open data standard and API for K-12 operational data, the state and district data-exchange standard credential E and the self-disclosure name.
FedRAMP: Federal Risk and Authorization Management Program
The U.S. government's authorization program for cloud services; a FedRAMP authorization is accepted as a security attestation in the self-disclosure.
FERPA: Family Educational Rights and Privacy Act
The federal law on the privacy of student education records, from the U.S. Department of Education's Student Privacy Policy Office: the school-official exception, re-disclosure limits and…
GovRAMP (formerly StateRAMP)
The state and local government counterpart of FedRAMP; a GovRAMP/StateRAMP authorization is accepted as a security attestation in the self-disclosure.
IDEA: Individuals with Disabilities Education Act
The Department of Education's IDEA site: the law, regulations and guidance on special education services and the records they create. Named by credentials A and C.
ISO/IEC 27001: Information security management systems
The international standard for an information security management system; a current certificate is one of the attestations a vendor may hold in the self-disclosure and for…
ISO/IEC 42001: AI management systems
The international standard for an AI management system, the certifiable counterpart of the AI RMF that a vendor may hold for its AI features.
ISTE Standards (students, educators, leaders, coaches)
The International Society for Technology in Education's standards for the use of technology in learning and leadership, which districts and hubs use when they describe outcomes…
NIST AI Risk Management Framework (AI RMF 1.0)
The framework an AI feature is documented against for ICAA's AI controls: purpose, training-data provenance and human-in-the-loop controls across Govern, Map, Measure and Manage.
NIST Cybersecurity Framework 2.0
The framework of outcomes (Govern, Identify, Protect, Detect, Respond, Recover) districts and vendors use to describe their security programs.
NIST SP 800-218: Secure Software Development Framework (SSDF)
The four practice groups a vendor evidences for credential B: Prepare the Organization, Protect the Software, Produce Well-Secured Software, Respond to Vulnerabilities.
NIST SP 800-53 Rev. 5: Security and Privacy Controls
The catalog of security and privacy controls for information systems that credential B (Security) is assessed against.
PPRA and the Student Privacy Policy Office
The Protection of Pupil Rights Amendment and the Department of Education's guidance for schools and their vendors on surveys, data collection and student privacy, alongside FERPA.
Section 504 of the Rehabilitation Act
The civil-rights law that prohibits disability discrimination in programs receiving federal funds, which schools apply to the technology they put in front of students and staff.
Section 508 standards (Section508.gov)
The U.S. General Services Administration's site for the Section 508 accessibility standards, the ACR/VPAT formats and testing guidance.
SOC 2: System and Organization Controls (AICPA)
The AICPA's SOC suite. A SOC 2 Type II report over the trust services criteria is the attestation most vendors present in the self-disclosure's security section.
WCAG 2.1: Web Content Accessibility Guidelines
The W3C recommendation ICAA's accessibility credential and the hub standard cite: Level AA is the conformance target of an Accessibility Conformance Report (VPAT).
WCAG 2.2: Web Content Accessibility Guidelines
The current W3C recommendation, a superset of 2.1 with nine added success criteria; a product may state it as its conformance target in the self-disclosure.
Implementation Guidance
How to plan, pilot and roll out AI-in-the-loop automation.Nothing has been published in this category yet.
AI Practices
How districts, hubs and vendors put AI to work responsibly: guidance, frameworks and worked examples.AI and the Future of Teaching and Learning (U.S. Department of Education)
The Office of Educational Technology's report on AI in K-12: keep humans in the loop, align to educational goals, build trust, and the recommendations districts cite…
AI4K12: the Five Big Ideas in AI (K-12 AI literacy guidelines)
The AAAI/CSTA initiative's guidelines for teaching AI in K-12, organised around five big ideas, with grade-band progressions a district can use for AI literacy.
CoSN: AI in K-12 (readiness checklist and resources)
The Consortium for School Networking's resources for district technology leaders: the generative AI readiness checklist and maturity tool, procurement questions and briefs.
Designing for Education with Artificial Intelligence: An Essential Guide for Developers (U.S. Department of Education)
The Department's guide for the developers of AI products used in schools: designing for teaching and learning, evidence, equity, privacy and transparency. What ICAA reads a…
Empowering Education Leaders: A Toolkit for Safe, Ethical, and Equitable AI Integration (U.S. Department of Education)
A toolkit for district and school leaders: modules on mitigating risk, building a strategy and maximizing opportunity, with questions to ask vendors and templates for policy.
Future of Privacy Forum: student privacy and AI in education
FPF's education program (formerly Student Privacy Compass): guidance and checklists on student data privacy, including the use of generative AI tools in K-12, for districts and…
ISTE+ASCD: AI in education
ISTE+ASCD's hub for educators and leaders on AI: courses, the AI Explorations resources and guidance on AI literacy aligned to the ISTE Standards.
NIST AI 600-1: Generative AI Profile of the AI RMF
NIST's profile of the AI Risk Management Framework for generative AI: the twelve risks particular to generative models and the actions to manage them, for a…
NIST AI RMF Playbook and resources
NIST's companion resources to the AI RMF: the Playbook of suggested actions per subcategory, profiles and crosswalks, for vendors documenting an AI feature and districts reviewing…
NIST Trustworthy and Responsible AI Resource Center
NIST's resource center for the AI RMF: the glossary, the Playbook online, crosswalks to other frameworks and the latest guidance documents.
OECD AI Principles
The intergovernmental principles for trustworthy AI (inclusive growth, human-centred values, transparency, robustness, accountability) that national guidance, the NIST AI RMF included, is mapped to.
Public
Open: OECD AI Principles
TeachAI: AI Guidance for Schools Toolkit
The toolkit from TeachAI (Code.org, ETS, ISTE, Khan Academy, the World Economic Forum and others): sample guidance, policies and a staff-training outline a district can adopt…
UNESCO: Guidance for generative AI in education and research
UNESCO's guidance on generative AI in education: a human-centred approach, age limits, data protection and the steps for regulating and using generative AI in teaching, learning…
Toolkit & Templates
Procurement language, scorecards and ready-to-edit templates.HECVAT: Higher Education Community Vendor Assessment Toolkit
EDUCAUSE's vendor security questionnaire. A completed HECVAT is one of the attestations the self-disclosure accepts for a product's security posture.
SDPC National Data Privacy Agreement (NDPA)
The Student Data Privacy Consortium's national agreement template. A signed agreement consistent with it is the first control of credential A, and "SDPC National DPA" is…
Student Data Privacy Consortium (SDPC) resource registry
The consortium's registry of signed agreements by state and alliance, where districts and vendors find and record data privacy agreements.
Student Privacy Pledge (Future of Privacy Forum)
The industry pledge on the handling of student data that many education vendors sign; a public commitment districts may ask a vendor about beside its signed…
Assessments
Self-assessments that show where a district stands today.Nothing has been published in this category yet.
Training
Recorded sessions and courses for staff at every level.Nothing has been published in this category yet.
The whole library comes with membership
District, vendor and hub members each see the documents written for them, and Advanced members get the full toolkit.