AWS Marketplace
Azure Marketplace
Google Cloud MarketplaceStudent records and research data
Redact names, student IDs, and contact details from records before they reach analytics, researchers, or a vendor. The policy library has a FERPA student records policy to start from.
Schools, colleges, and edtech
PII Redaction for Education and EdTech
Redact student information from records, research data, and the data behind learning tools, in your own cloud or on a single PC. FERPA lets a school release records without consent only after removing personally identifiable information, and that includes details that point to a student when combined.
For universities, districts, and edtech
What Philterd does with student records
Indirect identifiers count too
In a small class, a grade level, a sport, and a hometown can identify a student even with the name removed. For counts and statistics, Philter Diffuse adds differential privacy to counts and statistics, which makes it much harder to work back from a total to one student.
Open source you can inspect
The software is open source under the Apache license, so your IT and privacy staff can see exactly what it does with student data. It supports your FERPA work, and it does not certify it.
Which fits your institution
A university, district, or edtech company
Philter
Redacts student records, research extracts, and learning platform data through an API in your institution’s own cloud.
About Philter →A school office or registrar
Philter Desktop
Redact records, transcripts, and responses to records requests on a Windows PC in the registrar’s office, with no server for IT to run.
About Philter Desktop →A team that wants it built
PII Data Pipelines
We design the redaction for research extracts and data sharing, build it inside your cloud, measure it, and hand you a system you own.
See the engagement →Getting started at a university or district
- Deploy Philter from your cloud’s marketplace into your institution’s cloud account, where your student information system data already lives.
- Start from the FERPA student records policy in the policy library, and add patterns for your own student ID formats.
- Measure it on your own records. Have someone from the registrar’s or institutional research office mark a sample, then score the policy against it with Philter Scope.
- Review each release with earlier releases in mind. FERPA asks whether a student can be identified across single or multiple releases, so a field that is harmless alone may not be next to last year’s data.
Ready-to-use redaction policies
Free, ready-to-use policies from the open source policy library. Download and load into your Philter instance.
Education
v2.0.0
FERPA Student Records Redaction
Remove personally identifiable information from student educational records per FERPA (20 USC 1232g; 34 CFR Part 99).
General
v2.0.0
General-Purpose Starter Policy
A balanced starting policy covering common PII types — names, contact info, government IDs, payment data — with no vertical-specific tuning.
General
v2.0.0
GDPR Personal Data Redaction
Redact personal data and special-category data as defined by the EU General Data Protection Regulation (GDPR) from documents and records.
Recent writing on education
Redaction for Education: FERPA, Student Records, and Research Data Pipelines
FERPA governs student records but rarely gets the attention HIPAA does. A practitioner's guide for university IT, edtech vendors, and research-data teams.
Building a Privacy-Aware RAG System
RAG pipelines have two distinct PII leak vectors: ingestion and inference. A defense-in-depth blueprint with code, using Philter and the Philter AI Proxy.
Redact PDFs Offline on Windows so No Data Leaves Your PC
Philter Desktop redacts PDFs entirely on your Windows PC, including scanned pages read with on-device OCR. No uploads, no server, and it works offline.