AI-generated risk scores, learner profiles, and behavioral analytics are education records under FERPA. Here's what EdTech founders need to know about the school official exception, directory information limits, consent workflows, and the state laws that go further.