Web filtering for superintendents
You will rarely touch a filter setting, yet you answer for what it does. This guide is the executive view: the accountability you carry, the risks worth tracking, the questions the board and community will ask, and the evidence that lets you answer with confidence.
- CIPA compliance protects E-Rate discounts
- The filter is one layer of student safety, not all of it
- Over-blocking is a teaching risk, not a safe default
- Evidence decides audits, not good intentions
- AI tools need a policy owner this year
What the superintendent is accountable for
For a district that receives E-Rate discounts, CIPA has four parts. Each can be delegated, but the district answers for all of them together.
A working filter
A technology protection measure that blocks obscene images, child sexual abuse material and content harmful to minors on computers used by minors.
A public policy
An internet safety policy adopted after reasonable public notice and at least one public hearing or meeting. See the CIPA internet safety policy guide.
Oversight of minors' use
The policy must provide for monitoring the online activities of minors. How the district does this is a local decision that should respect student privacy.
Teaching online behavior
Education for students about appropriate online behavior, including social networking, chat and cyberbullying awareness.
Certification happens through the E-Rate forms each funding year. Whoever signs is attesting that all four parts are in place, so the superintendent should know who signs and what they rely on. Background: what is CIPA.
Compliance you can describe in three sentences
The hosted CIPA filter blocks by category with a CIPA preset, applies each school's own settings, and keeps reports for the file. A superintendent gets a clear answer for a board question without learning the technology.
- Adult and VPN/Proxy/Anonymizers are on in the preset, with optional categories for the board to choose.
- Activity reports, a policy record and a log export support the annual compliance packet.
- One console serves every school in the district.
The risk register for web filtering
Filtering risk is not only about harmful content getting through. Blocking too much, leaking data and making promises the district cannot keep are just as real.
Compliance and E-Rate
- What could happen
- An audit finds a gap in filtering or policy adoption.
- Control
- Annual evidence packet, reviewed before certification.
Harmful content reaches students
- What could happen
- A device or network was never covered, or a new site slipped through.
- Control
- Coverage reports, regular tests and fast-updating category data.
Over-blocking
- What could happen
- Teachers lose lessons and students lose research sources.
- Control
- A request route with reasons recorded and reviewed each term.
Browsing data exposure
- What could happen
- Student browsing records are kept too long or seen by too many.
- Control
- Retention limits, access lists and a signed privacy agreement.
Overpromising to families
- What could happen
- Parents hear the filter keeps children safe, then something happens.
- Control
- Plain public statements about what filtering does and does not do.
Phishing and malware
- What could happen
- Staff credentials are stolen through a fake login page.
- Control
- Security categories blocked for all users, plus staff training.
Viewpoint and access challenges
- What could happen
- A complaint that blocking targets lawful viewpoints or topics.
- Control
- Category-based rules applied evenly, with a documented review route.
New categories without owners
- What could happen
- AI tools are allowed or blocked by accident, not decision.
- Control
- Named owner and board-backed policy for each new category.
Who decides what: a delegation map
Unclear ownership is the most common root cause of filtering problems. R means responsible for doing it; A means accountable for the outcome.
| Decision or task | Board | Superintendent | IT director | Curriculum | Librarians | Safety team |
|---|---|---|---|---|---|---|
| Adopt the internet safety policy | A | R | Input | Input | Input | Input |
| Choose and run the filter | Budget | A | R | Input | Input | Input |
| Category settings per grade band | Policy | A | R | R | Input | Input |
| Unblock and review requests | Reports | Escalation | A | R | R | Input |
| AI tools in instruction | Policy | A | R | R | Input | Input |
| Student wellbeing concerns | Reports | A | Support | Input | Input | R |
| E-Rate certification | Oversight | A | R | None | None | None |
Each role has its own guide: IT directors, finance and procurement, curriculum and instruction leaders, school librarians and safety and counseling teams.
The board, the community and the questions you will get
Each audience wants something different. The facts stay the same; the emphasis changes.
"Are we compliant?" Point to the evidence packet and the date of the last review.
"Why does this cost what it does?" Show the full cost and what it protects, including E-Rate discounts.
"What is our position on AI?" Name the owner and the date a decision is due.
"Is my child safe on the school laptop?" Explain what the filter blocks, where it works and its limits.
"Do you watch my child's browsing?" Explain what is recorded, who can see it and how long it is kept.
"Why was this site blocked?" Point to the request route.
"The filter blocks my lessons." Show request response times and changes made from requests.
"Why are staff filtered at all?" Obscene content and child sexual abuse material are blocked for everyone, and security categories protect staff accounts.
"Are you censoring topics?" Explain category-based rules, the narrow CIPA core and the review process.
"A student saw something harmful." Confirm the facts first, then explain the response and what changes.
For the board meeting itself, use presenting web filtering to the school board. For families, explaining web filtering to parents has letters and FAQs.
Over-blocking: the risk superintendents underestimate
Blocking more feels safer, and nobody complains about a site they never knew was blocked. The cost shows up instead as lost lessons, frustrated teachers and students who learn to work around the system.
| Signal | What it usually means | Executive response |
|---|---|---|
| Many unblock requests for the same category | The category is set too strictly for that grade band | Ask IT and curriculum to review the setting, not just single sites |
| Teachers stop asking for unblocks | The request route is too slow, or staff gave up | Check response times and survey staff once a year |
| Rising bypass attempts | Students want something the policy denies, or the filter is too blunt | Close bypass routes and look at what students were trying to reach |
| Librarians reporting blocked research | Health, news or history sources caught by broad categories | Give research needs a fast review path |
| Complaints about blocked viewpoints | Inconsistent manual blocks or a poorly chosen category | Confirm rules are category-based and applied evenly |
CIPA sets a narrow floor: the three categories of visual depictions. Everything above it is a local choice, and the district should be able to explain each one. A balanced view is in internet filtering in schools: pros and cons.
Reference sites that a clumsy filter blocks by mistake
Real lookups from our data. Each carries an education or science label, so a category-based policy keeps them open while the risky categories stay shut.
| Website | Categories in our data |
|---|---|
| wikipedia.org | Education/Reference |
| britannica.com | Education/Reference |
| history.com | Education/Reference |
| nasa.gov | Science |
| npr.org | News/Media |
| nationalgeographic.com | Education/Reference |
Equity, access and the take-home question
Filtering decisions land differently on different families. A superintendent is the person best placed to see that whole picture.
Loaned hotspots
Students without home internet often rely on district hotspots. Check what filtering applies to them and that families are told.
Same rules, same school
Students on school devices and students on personal devices should not have very different experiences of the same lesson.
Family communication
Explain filtering in the languages your families use, with the same plain facts in each version.
Assistive technology
Make sure accessibility tools and services that students rely on are never caught by a broad category.
The same rules for a child with no home Wi-Fi
A private encrypted link keeps the same rules on laptops and phones off the network. Nothing is installed on computers, which keeps support calls down.
A yearly rhythm for the superintendent
Four short touchpoints a year are usually enough to stay informed without managing the detail.
Back to school
Confirm coverage of every new device and a home network test before students take devices home.
Mid-year status
Review request volumes, bypass attempts and any incidents. Decide on open category questions.
Before certification
Review the compliance packet before the E-Rate certification is signed.
Policy and budget
Bring policy updates and next year's budget to the board together.
When something goes wrong
Filtering incidents usually become public quickly. A short, agreed sequence keeps the response calm and accurate.
Protect students
Any concern about a student goes to the safeguarding process first, not to IT.
Establish facts
IT confirms what happened technically: which device, network and category.
Fix the gap
Close the specific route, then check whether the same gap exists elsewhere.
Communicate
Tell those affected what happened and what changed, without overpromising.
Record and report
File the incident with filtering records and report it to the board in the next update. Note what changed so the same gap is checked in future tests.
Web filtering does not identify at-risk students and should not be presented as if it does. Concerns about a student belong with counselors and the district's safety procedures.
What to ask your team, and what to ask the vendor
Short, direct questions reveal more than long status reports. Ask them once a year at least.
Ask your team
- Which devices and networks are not covered today?
- When did we last test filtering from a home network?
- How many unblock requests came in this term, and how fast were they answered?
- Who can see student browsing records, and for how long are they kept?
- Does the adopted policy still match how we actually filter?
- What would we show an auditor tomorrow?
- Who owns the AI tools decision, and when is it due?
Ask the vendor
- How quickly are new websites categorized, and how often are older ones rechecked?
- How is accuracy measured, and will you share the results?
- What happens to filtering if your service is down?
- Where is our student data stored, and who can access it?
- Will you sign our student data privacy agreement?
- What reports map directly to CIPA evidence?
- How do we leave, and what happens to our data when we do?
Five measures worth asking for
A one-page report with the same five measures each term lets you spot trends without reading logs. All of them are aggregate figures, never individual student records.
Devices and networks covered
- Shown as
- Share of managed devices enrolled, and any network not filtered.
- Healthy sign
- Gaps are named, with a date to close them.
Category test results
- Shown as
- Pass or fail per group, on site and off campus.
- Healthy sign
- Tests run every term, not only after a problem.
Unblock requests
- Shown as
- Number received, share approved and typical response time.
- Healthy sign
- Repeated requests lead to category changes.
Bypass attempts
- Shown as
- Blocked VPN and proxy attempts as a trend.
- Healthy sign
- Rises are explained and followed by action.
Threats blocked
- Shown as
- Phishing and malware sites blocked across users.
- Healthy sign
- Linked to staff training on suspicious links.
Your public statement on filtering
Districts are often asked for a short statement about filtering, on the website or after an incident. Accurate wording protects trust far better than reassuring wording.
Say
- The district filters internet access on its networks and managed devices, as federal law requires.
- Filtering blocks categories of harmful sites and is reviewed regularly.
- Staff can request a review if a useful site is blocked.
- Filtering is one part of student safety, alongside supervision, teaching and support staff.
- Families can contact the school with questions or concerns.
Avoid
- "Students cannot access anything inappropriate."
- "Our system detects students at risk."
- "We see everything students do online."
- "The filter guarantees safety at home."
- Naming individual students or sites in public statements about incidents.
The annual compliance packet
Ask for one folder, refreshed each year before the E-Rate certification. If it exists, an audit becomes a document request rather than a crisis.
- Adopted internet safety policy and the date of adoption
- Public notice and minutes of the hearing or meeting
- Filter configuration exports for each user group
- Coverage report for networks and devices
- Category test results, on site and off campus
- Unblock request log summary with outcomes
- Records of online safety education delivered to students
- Student data privacy agreement with the filtering vendor
- Contract and procurement file for the filter
- Incident summaries and changes made
The CIPA compliance checklist goes item by item, and what USAC asks for in a CIPA audit shows the requests reviewers typically make.
Decisions on your desk this year
Most districts face the same handful of open questions. Each needs an owner and a date, even if the answer is to keep things as they are.
AI tools
Which tools are approved for which grades. Our AI tools set covers 11,800+ AI-tool domains in 18 categories and 165 subcategories. Start with AI tools policy for schools.
Phones and personal devices
What applies to personal phones on school Wi-Fi, and what state phone rules require of you.
Off-campus coverage
Whether take-home devices are filtered at home, and how that is explained to families.
Hosting model
Whether to keep on-site appliances or move to a hosted CIPA filter at the next refresh.
Many states have added their own rules on top of CIPA. Check your state's page in our state school internet safety laws section. Where a state rule asks for more than CIPA, add it to the compliance packet so certification and state reporting draw on the same evidence.
Five questions a board asks, answered two ways
Use this to see which answer you can give with evidence in hand.
| Board question | Without a managed filter | Hosted CIPA filter |
|---|---|---|
| Are we meeting CIPA? | We believe so | Category blocking with a CIPA preset and reports |
| What do children see at home? | It depends | Same rules through a private encrypted link |
| Who changed the policy? | Unclear | Policy record of changes |
| Can we prove it at audit? | Piece together screenshots | Log export for CIPA files |
| How fast can we fix a block? | Next week | Applies in seconds |
| What does it cost? | Hidden in staff time | Quote by schools and devices |
Superintendent web filtering FAQ
What is a superintendent accountable for in school web filtering?
For an E-Rate district, CIPA compliance as a whole: filter, publicly adopted policy, oversight of minors' use and online safety education. The work is delegated, the accountability is not.
What happens if a district is not CIPA compliant?
A district that certified compliance it lacked can be required to repay discounts and risk future funding. The reputational cost can be larger.
Can a web filter keep every student safe online?
No. It reduces exposure on school networks and devices. Safety also depends on supervision, teaching, safeguarding and families.
How should a superintendent respond to a community complaint about blocked content?
Route it through the documented review process, explain the decision and its reason, and report patterns to the board.
How often should a superintendent review web filtering?
A short status each term and a full review each year, plus reviews when laws, device programs or categories change.
Should the superintendent decide which AI tools students may use?
Make sure a decision exists and is owned, usually by instructional leadership under board policy. IT then applies it.
Does CIPA require the district to track each student's browsing?
The policy must provide for monitoring minors' online activities, but the law itself says it does not require tracking internet use by any identifiable minor. Reasonable oversight with privacy in mind is the usual approach.
Who should hold the filtering evidence?
IT usually produces it. One named person, often the E-Rate coordinator, should keep the annual packet with E-Rate records so it survives staff changes.
Pricing depends on the number of schools and devices, and we send a quote within one business day. A pilot on one site gives you a real report to show the board before you commit.
Talk to us about your district
We can help your team set up category-based filtering that produces the coverage, test and request evidence a superintendent needs, with settings simple enough to explain to the board and to families.
Talk to us about your district See the hosted CIPA filter