Version school-commercial-2026-08-22.1

School trust and implementation packet

Current factual controls, limitations, responsibilities, and launch checklists for procurement and IT review. This packet does not make legal-conformance, learning-outcome, or Minecraft-affiliation claims.

Reviewed 2026-08-22 · Owner: Danny — MindCraft security and privacy owner

Data flow and categories

An authenticated adult creates or administers an organization-scoped learner. The Minecraft mod sends a revocable device credential, bounded activity context, reading audio for transcription, and generated-practice requests. MindCraft stores the minimum learner profile, assignments, attempts, progress projections, and content-free provider cost evidence needed to provide and bill the service. Minecraft credentials, chat, GPS, contacts, and social profiles are not collected.

Security controls

Organization licenses, memberships, group assignments, and learner custody are independently verified on the server. Privileged administrators require verified-email assurance; MFA is recommended and prompted. Provider credentials remain server-owned. Sensitive public mutations are inventoried, rate-limited where appropriate, tested for direct-call denial, and deployed Convex-first from an exact reviewed SHA.

Providers and purpose

Clerk: Adult authentication and verified identity
Convex: Application data, authorization, and durable operational records
Vercel: Website and API hosting
Google Gemini: Bounded reading-practice generation
Deepgram: Reading speech-to-text and text-to-speech
Resend: Transactional adult email
Slack: Opaque operational and support alerts only

Provider purposes and retention are subject to the signed school agreement and current provider terms. Prompt, transcript, learner-name, and credential content is excluded from the enterprise billing ledger.

Retention, export, deletion, backup, and offboarding

Organization exports, resumable learner deletion, staff removal, contract revocation, and organization offboarding follow the versioned privacy inventory. Financial and audit evidence is retained only for the approved contract/legal window and is minimized or pseudonymized where required. Verified production snapshots support recovery; deletion is never used as a rollback primitive.

Incident contact process

School incidents enter the contracted support path, are triaged by severity, and can trigger immediate license suspension, membership revocation, provider kill switches, or device credential revocation. Contract-specific contacts and notice timelines are recorded in the signed school packet, not learner-facing profiles.

Accessibility statement and tested limits

The staff web experience is tested for keyboard operation, visible focus, reduced motion, responsive layouts, semantic labeling, and automated WCAG 2.2 AA issue detection. Automated and scripted checks are evidence, not a legal conformance claim. The Minecraft mod/game experience is a separate scope and has not been represented as Section 508 or WCAG conformant.

System and network requirements

The school product requires Minecraft Java 26.2, a supported Windows/macOS/Linux computer, legitimate Minecraft licensing, local installation rights, one OS/Minecraft profile per learner, a microphone or headset, a supported browser, and outbound DNS/HTTPS access. Minecraft Education, Bedrock-only, console/mobile-only, and Chromebook-only fleets are not supported.

Implementation and support responsibilities

MindCraft

■ Provision the contracted tenant, roles, limits, and support path
■ Provide signed release artifacts, setup guidance, training, and incident escalation
■ Operate tenant authorization, cost controls, export/deletion/offboarding, and rollback

School or district

■ Approve the learner authority basis and contract/DPA
■ Provide licensed compatible devices, profiles, network access, and headsets
■ Maintain accurate staff/roster inputs and immediately report departures or incidents

Procurement checklist

1. Signed school agreement and DPA or owner-approved equivalent
2. Approved learner authority basis and data-steward owner
3. Contract start/end dates and separate staff/learner limits
4. Negotiated active-seat rate, invoice cadence, provider alert, and hard spend limit
5. Purchase-order or manual-invoice reference
6. Privacy, security, billing, incident, and deletion/return contacts
7. Actual device/network/licensing qualification evidence
8. Support owners, hours, escalation path, and suspension authority

Onboarding sequence

1. Verify signed commercial, privacy, authority, and technical-fit evidence
2. Provision the district, school, license, seat limits, and initial assured administrator
3. Invite staff and verify role scope before assigning groups
4. Preview and confirm the minimized roster import with no student email, age, or DOB
5. Install on one qualified clean profile and run the canary
6. Expand to the approved class only after the canary has no stop-threshold event
7. Review day 1, day 7, and day 30 aggregate success evidence
8. Rehearse staff removal, export, deletion, suspension, and offboarding

Support and incident operations

School support hours and emergency contacts are recorded in the signed school packet.

critical: Suspected cross-tenant exposure, credential exposure, or school-wide unsafe access; suspend affected access immediately.; Contain access immediately; record the acknowledgement and notice clock in the signed school packet.
high: Classroom-wide outage, failed revocation, or blocked privacy lifecycle; acknowledge through the contracted incident path.; Acknowledge through the contracted school path within its recorded business-hours target.
normal: Individual access, roster, device, billing, or workflow issue; handle during contracted school support hours.; Respond during the next contracted school-support window.

Owners: Danny — MindCraft school support owner; Danny — MindCraft school incident commander.

Operational evidence and rehearsal

Success reviews occur at day 1, day 7, day 30 using aggregate/minimized evidence.

invitation failure: Owner: Danny — MindCraft school implementation owner
import partial failure: Owner: Danny — MindCraft school implementation owner
device failure: Owner: Danny — MindCraft school implementation owner
provider outage: Owner: Danny — MindCraft school support owner
staff removal: Owner: Danny — MindCraft security and privacy owner
license suspension: Owner: Danny — MindCraft school incident commander
export request: Owner: Danny — MindCraft security and privacy owner
learner deletion: Owner: Danny — MindCraft security and privacy owner
organization offboarding: Owner: Danny — MindCraft security and privacy owner