What should an education technology vendor share before requesting a cyber quote?
Share a practical map of the information the service collects, where it is stored, who can access it, which vendors handle it, and the customer’s limits on its use. For a school relying on FERPA’s school-official exception, Department guidance specifically identifies the vendor’s service and the school’s control over record use and maintenance.[3][5]
Ask the broker to compare that map with the proposed cyber form: who may be an insured, which vendor-held data and events fit its definitions, what response costs it addresses, and which waiting periods, exclusions, retentions, or sublimits apply. FTC guidance frames vendor risk, response, and cyber insurance as matters to discuss, not promised policy benefits.[3][1]
Read the Education Insurance Buying Guide
Sources and Further Reading
- Small Business — National Association of Insurance Commissioners (NAIC). FAQ: BOP (lines 20-24); CGL and exclusions (29-54); other liability (55-63); property (102-126); work-from-home (269-283)
NAIC overview of commercial insurance categories, property, liability, cyber, professional services, and questions to confirm in policy wording.
- Launch your business — U.S. Small Business Administration. Get business insurance, lines 536-566: common coverage types and buying steps
- Cybersecurity for Small Business — Federal Trade Commission. Supplier-risk and insurance guidance (lines 51-59); vendor breach response (170-173); cyber insurance section (175 onward)
FTC questions for small businesses about vendor risk, cybersecurity requirements in contracts, and cyber insurance terms to discuss with an agent.
- To which educational agencies or institutions does FERPA apply? — U.S. Department of Education, Student Privacy Policy Office. FAQ answer; accessed directly 2026-09-28
Department of Education guidance that helps schools and vendors check the funding and institution scope before relying on FERPA explanations.
- Who is a “school official” under FERPA? — U.S. Department of Education, Student Privacy Policy Office. FAQ answer; school-official exception conditions; accessed directly 2026-09-28
Department of Education guidance on the school-official exception and conditions for vendors handling education records.
- Commercial Insurance Guide — California Department of Insurance. Commercial property, commercial general liability, auto, and California workers compensation sections; guide revised June 14, 2024; accessed directly 2026-09-28
California commercial-lines orientation on property, liability, auto, and workers compensation; not an education-specific policy or a nationwide rule.
- Employer information — California Department of Industrial Relations, Division of Workers’ Compensation. Opening employer requirement and out-of-state employer paragraphs; accessed directly 2026-09-28
Spot, a product of Tools for Enlightenment, publishes this guide and works in the commercial insurance market. This is general buyer education; the actual policy wording, insured entities, operations, and jurisdiction determine what applies.
Updated 2026-09-28. Editorial Policy
Get Help With Insurance Buying and Renewals.
Get help buying coverage and managing renewals, with less paperwork for your team. Start with a free consultation.
