PRIVACY BY SEPARATION

Student boundaries
cannot depend on a slogan.

PRISMS AI reduces backend access to student content through an on-device runtime, a separately deployed model data plane, and an isolated school control plane.

WHAT GOES WHERE

Each layer receives only
what its job requires.

01

Stays on the iPhone

Full conversations, source capsules, profile bodies, private personal knowledge, the task ledger, agent orchestration, and device-permission state.

02

Passes through the model path

The bounded model request and response needed for one inference pass through relay memory without a relay database or content log.

03

Enters the control plane

Authentication, agent and skill versions, structured knowledge locators, knowledge gaps, and anonymous technical diagnostics that exclude prompt and output bodies.

THE PRECISE PROMISE

Stateless does not mean
end-to-end invisible.

The relay can process plaintext while forwarding, and the selected model provider receives inference content. PRISMS AI’s promise is narrower and verifiable: the relay does not persist content, the management backend does not receive it, content logging is disabled, and student identity is not forwarded to the model provider.

DEVICE-ONLY REQUIREMENTUse an on-device model when content must never leave the phone

Encryption in transit protects network transport. It does not prevent the chosen cloud model provider from receiving the request it must process.

USER CONTROL

Permissioned, revocable,
and auditable.

Calendar, location, Health, camera, photos, speech, and files follow explicit student intent and iOS authorization.

OFFCROSS-DEVICE SYNC

The current iPhone remains authoritative.

Personal memory, private knowledge, and task bodies do not currently synchronize across devices. Future continuity requires explicit opt-in, encryption, revocation, and auditability.