[ FOR IT ]

Nexus for IT and technology directors

The questions school IT asks first, answered plainly: sign-in, access, review logs, AI providers, hosting, filters, integrations and what is not built yet.

Plan a pilot Watch the demo

Facts as of Oct 18, 2026Last reviewed Oct 19, 20263 min read

What school IT asks first

Answers as of Oct 19, 2026. The signed agreement governs.

Topic	Answer
Sign-in	Google sign-in; Nexus asks only for OpenID, email and profile. Microsoft sign-in, SAML, Clever and ClassLink are not available yet.
Membership	By administrator enrollment or a single-use invitation to one exact email address, never by email domain.
Access checks	School, membership, class and role are checked fresh before every school read; anything a person may not see returns an error.
Review log	An append-only record of every staff read of a class chat; administrators can read it.
Data use	No sale, no ads, no training or fine-tuning on student data, in the agreement.
AI providers	Business APIs. Anthropic deletes API data within 30 days (flagged content up to 2 years); OpenAI keeps abuse logs up to 30 days. Our model router excludes providers that collect prompt data.
Hosting	Google Cloud (Google Kubernetes Engine) in the United States.
Encryption	HTTPS in transit; Canvas and Blackbaud tokens encrypted with a dedicated key.
Analytics	No product analytics or tag managers in school builds; error reports are off unless the school turns them on, and they drop message content.
Breach notice	Within 72 hours of confirming a breach, inside Maryland's 10-day rule for vendors.
Agreements	Your data privacy agreement, or the Student Data Privacy Consortium's National Data Privacy Agreement.
Ages	Students 13 and older; in a pilot, age comes from the school's roster.

Nexus security and data facts for school IT

Filters and allow-lists

Your filter will file Nexus under an AI category. Allow Nexus for pilot students and keep consumer AI blocked if that is your policy. The product runs at app.trynexus.cc; before a pilot we send the exact list of addresses for your filter. Test on a school device, on school Wi-Fi, before students start. See Nexus and your web filter.

Integrations

Pasted assignments work today. Canvas end to end is built and tested against a Canvas simulator and ships with the next release. A Blackbaud assignment connection is built and has not run against a real school account. Class materials from Google Classroom, Microsoft Teams, Moodle, D2L Brightspace and Blackboard Learn are in progress. See integrations.

Models and provider terms

Your school approves models per class from Nexus's reviewed list. Provider rules for minors shape that list: Google's Gemini API terms bar use in services "likely to be accessed by individuals under the age of 18," and OpenAI's API agreement bars letting minors use its services without a parent's or guardian's consent. Read AI models for students under 18.

Export and deletion

Students can export their own school data from Settings, and the school can ask us for any student's export. Before a pilot, we agree retention windows with your school and test deletion end to end, including derived data and how long backups keep a copy. Nexus cannot erase copies held elsewhere, such as model-provider and LMS records, rotating logs and backups.

Monitoring on school devices

Monitoring software on a school device works outside Nexus and may capture anything a student types. Personal chats are not shown to teachers inside Nexus, but say plainly in your parent notice that device monitoring is separate.

[ FAQ ]

Questions and answers

Where is Nexus data hosted?

On Google Cloud (Google Kubernetes Engine) in the United States.

Does Nexus train AI on student data?

No. We do not sell student data, show ads or train or fine-tune models on it, and the agreement says so. The AI providers we use offer business terms under which they do not train on it by default.