Universities
Public and private four-year institutions facing Title IX rollback consequences and continued Clery obligations.
Safety infrastructure for every student on your campus.
Soteria Campus gives your students device-first evidence preservation, GPS check-ins, and silent alerts, wired into your university's safety policy without exposing anyone's content to Title IX, residence life, or campus police. The architecture protects them. You see only what the law requires you to see.
- Aggregate-only dashboard
- Not a source of education records under FERPA
- Student data never leaves the device by default
Built by someone who needed it.
Soteria was built by a survivor of domestic violence who filed reports through institutional channels that failed to act, and then built the evidence-preservation tool that should have existed the moment it was needed. The product exists because the systems meant to protect people did not show up, and the record had to be made anyway.
On a campus, that blind spot has a shape. A student who is assaulted often has to prove it to the same institution that would rather the matter stayed quiet. Soteria's architecture is why your Title IX office can hand every student a real evidence tool without ever holding the student's recordings, without adding surveillance liability, and without a shred of the student's content in institutional custody. The university provides the infrastructure. The university cannot see inside it, and cannot betray the student who uses it.
Who deploys Soteria Campus
Community colleges
Two-year institutions whose students often commute through unsafe situations.
K–12 districts
Secondary school districts whose students face elevated risk on and off campus.
Graduate and professional schools
Schools whose students work in clinical, field, or community settings where safety incidents are routine.
What your institution can never see
The aggregate-only dashboard is not a policy. It is the architecture. Even if the Title IX office demands access, even if campus police subpoena us, even if a hostile party gains admin credentials, there is no path to individual student content. It is not stored on Lonia AI servers in a form anyone can read.
- Device-first capture: recordings are created and held on the student's device.
- On-device transcription: transcripts are generated locally, not in the cloud.
- Cloud backup is opt-in and student-controlled, never enabled by the institution.
- Duress override is invisible to the institution: coercion protections leave no admin-visible trace.
- The admin dashboard shows only aggregate enrollment and session counts.
- Scale-aware k-anonymity thresholds suppress even aggregate data below 100 enrolled students.
- OAuth-only authentication with no password storage anywhere in the system.
- WORM evidence chain at the client layer: even Lonia AI cannot tamper with evidence after capture.
Where FERPA applies, and where it does not
Soteria Campus does not store student recordings on institutional servers. Recordings live on the student's device by default. When a student turns on cloud sync, those recordings are stored encrypted under the student's own account. The institution has no access path to them; they are not exposed to any institutional role, dashboard, or export. Institutional admins see only aggregate metrics behind a 100-student privacy floor, so no individual student is identifiable in an institutional dashboard.
FERPA is followed for the institutional paperwork Soteria does handle on your behalf: rosters, admin invitations, and billing records. Those are handled as institutional records, with access controls and audit logging, exactly as your other vendor systems are.
The distinction matters for procurement. Because the recordings, transcripts, and personal safety data that would otherwise trigger FERPA obligations are never accessible to the institution, they are not the institution's education records to protect or disclose. Soteria Campus is not a source of education records for that content. This is enforced by architecture, not by contract clause.
Volume-tiered pricing. The more students, the lower the per-seat rate.
Volume-tiered means the whole enrollment count is billed at the single rate of the band it falls into, unlike graduated pricing, where each band is priced separately. Your entire seat pool gets one band's rate. So 8,000 enrolled students × $3.50 = $28,000/month, all 8,000 seats at the same band rate.
Under 5,000 enrolled
$3.99
per seat / month
5,000 to 14,999 enrolled
$3.50
per seat / month
15,000 or more enrolled
$3.00
per seat / month
Worked example. If your campus has 8,000 enrolled students, your monthly cost is 8,000 × $3.50 = $28,000/month. The 5,000–14,999 band rate applies to all 8,000 seats. If you grow past 15,000, the entire seat pool moves to the $3.00 rate.
Estimate your cost
Monthly: –
Annual (one month free): – per year
How payment works
Soteria Campus is billed by ACH bank transfer. We do not accept credit cards at any contract size. ACH keeps processing costs near zero, which means more of your safety budget stays inside your institution instead of going to payment processors.
Annual prepay includes one month free: pay for 11 months, get 12 months of service. Most institutions choose annual to lock in the lowest effective per-seat rate and simplify procurement.
Wire transfer is available as a backup for AP systems that cannot do ACH. Contact us if your finance team needs that path.
Frequently Asked Questions
How does volume-tiered pricing work?
Volume-tiered means your whole enrollment count is billed at the single rate of the band it falls into. It is not graduated across bands. If your campus has 8,000 enrolled students, all 8,000 seats are billed at the 5,000–14,999 band rate of $3.50. If you grow past 15,000 enrolled, the entire seat pool moves down to the $3.00 rate. The lower the band, the lower the per-seat rate for every seat.
Why ACH-only? Can we use a credit card or P-card?
Soteria Campus is billed by ACH bank transfer only. ACH keeps processing costs near zero, which means more of your safety budget stays inside your institution instead of going to payment processors. Credit cards and procurement cards (P-cards) are not offered at any contract size. Wire transfer is available as a backup for AP systems that cannot do ACH.
What does "one month free with annual" mean?
Annual prepay bills you for eleven months and gives you twelve months of service. The math is your monthly cost multiplied by 11, not 12. The twelfth month is free. Most institutions choose annual to lock in the lowest effective per-seat rate and simplify procurement.
How do we purchase, and what happens next?
Purchase begins with sign-in rather than a public form. Your first admin, typically a Title IX coordinator, dean of students, or campus safety director, goes to campus.soteria.lonia.ai and chooses Continue with Google or Continue with Microsoft using their institution account. There is no separate password to create, manage, or rotate. Once signed in, they confirm your campus email domain, enter your enrollment count and billing contact, and complete ACH setup. From there you can verify any additional campus domains, invite your other admins, and start inviting students.
Are we creating new FERPA disclosure obligations?
Not for student recordings. Soteria Campus does not store student recordings on institutional servers. Recordings live on the student’s device by default, and when a student turns on cloud sync those recordings are stored encrypted under the student’s own account. The institution has no access path to them; they are not exposed to any institutional role, dashboard, or export. Institutional admins see only aggregate metrics behind a 100-student privacy floor, so no individual student is identifiable in an institutional dashboard. FERPA is followed for the institutional paperwork Soteria does handle on your behalf: rosters, admin invitations, and billing records. Because the recordings, transcripts, and personal safety data never enter the institution’s possession, Soteria Campus is not a source of education records for that content, and there is nothing there for the institution to disclose.
How does the Title IX office see what students are doing?
The Title IX office sees aggregate enrollment counts and aggregate session counts only. It can never see an individual student’s content, location, or session activity. This is enforced by architecture, not policy. There is no path, dashboard, or export that exposes individual student data to the institution.
What about Clery Act reporting?
Soteria Campus is independent of Clery reporting. The institution continues its existing Clery process unchanged. Soteria adds a student-controlled evidence layer that students can use voluntarily; it does not replace or alter your Clery obligations.
Can we add seats mid-year if enrollment changes?
Yes. Seats can be added at any time through the admin dashboard, and billing prorates automatically. You are never locked into your initial seat count.
Can we cancel?
Yes, anytime, through the admin dashboard or the Stripe Billing Portal. There are no cancellation penalties.
Get started
Institutional purchase begins with sign-in, not with a public form. Your first admin signs in to the Campus admin dashboard with their institution Google or Microsoft account. There is no separate password to create, manage, or rotate.
- Sign in at campus.soteria.lonia.ai with your institution Google or Microsoft account.
- Confirm your campus email domain and enter your enrollment count and billing contact.
- Complete ACH setup through Stripe.
- Invite your Title IX coordinators and other admins, then start inviting students.
Campus is billed by ACH bank transfer only. Your bank details go directly to Stripe, and we never see them. If your institution needs a quote, a wire transfer, or a procurement document first, email admin@lonia.ai.