Trust & security

Student data deserves more than a checkbox.

Lyra was built for K–12 from the first line of code, so privacy, data ownership, and clear answers for your IT and compliance reviews aren’t bolted on afterward. Here’s the whole posture, in plain language.

Your data is yours
Import your catalog and rosters, and export everything back out at any time, in standard formats. No lock-in, no ransom for your own records.
Built for FERPA & COPPA
Lyra operates as a “school official” under FERPA’s exception and is built for COPPA’s stricter under-13 protections. Education records are used only for the purposes your school authorizes.
AI that never sees patrons
Vega and semantic search work over collection metadata and aggregate stats only. Patron names, IDs, emails, and individual borrowing history are excluded from AI requests, enforced in code rather than policy alone.
US-region infrastructure
Application data is hosted with AWS and Neon in the United States, encrypted at rest. Circulation history stays private to your staff and is never sold.
Access control & SSO
Staff accounts come in 3 roles: admin, standard, and limited. Limited restricts what patron details and circulation data a person can see, which suits volunteers and aides. Staff sign in with Google or Microsoft, so accounts follow the systems your school already manages.
Transparent by default
Every subprocessor that touches your school's data is listed publicly, and we give at least 30 days’ notice by email before that list changes, unless the change is required for security or compliance. Our DPA and privacy terms are published here, with no NDA required to read them.
Where your data lives

A short, honest supply chain.

We keep the list of companies that touch your data small on purpose, and we publish all of it. Application data is encrypted at rest and hosted in the United States.

See the full subprocessor list
AWS · NeonApplication hosting and database, US, encrypted at rest
AnthropicVega AI, collection metadata and aggregate stats only
OpenAISemantic search embeddings, catalog text and queries only
StripePayments, billing contacts only, no patron data
The documents

Everything you need for a vendor review.

Published in full, right here. Hand them to your IT team or data-privacy officer without emailing us first.

Ready to see what your library could feel like?

Start a free 30-day trial with your own catalog. No demo call, no credit card. We'll help you bring your data over when you're ready to switch.