The Contract Clause Your School Keeps Skipping

Every AI vendor contract has a clause that matters more than the price, the features, and the implementation timeline combined: the data-use clause. It's the paragraph that says what the vendor may do with student data beyond delivering the service. Most schools skim it.

Here's what you're looking for, in plain English. First, a promise that student data is used only to provide the service — not to train models, not to build new products, not for "research" with vague boundaries. Second, a clear statement of what happens to data when the contract ends: returned, deleted, on what timeline, with what proof. Third, a breach-notification commitment with actual deadlines.

What you don't want to see: "we may use aggregated or de-identified data to improve our services." That sentence, left unexamined, can swallow every protection around it. If it's there, demand specifics — or strike it.

I learned in my federal grants compliance days that the boring paragraph is usually the load-bearing one. Grants lived or died on terms nobody read until the audit. Vendor contracts work the same way: the clause you skip is the one you'll meet again later, under worse conditions.

Read the data-use clause first, negotiate it hardest, and never let a sales deck override what the paper says.

I explain frameworks; I don't give legal counsel.