The recommendation pipeline, data-plane separation, model lifecycle, and the DPDP Act 2023 / child-safety design every institutional deployment must satisfy.
Back to product overviewConfirm tenant, purpose, role, age state and permitted fields
Subjects, approved history, saved items, goal, constraints
Collaborative filtering, content similarity, curriculum rules
Prerequisites, programme, age, capacity, timetable, exclusions
Pathway relevance, learning gap, semantic and sequence fit
Quality, fairness, duplication, policy, frequency checks
Translate reason codes and differences into plain language
Limited set with save, dismiss, correct, ask-adviser actions
Collect feedback/completion without direct identifiers
Preserve model, features, catalogue version, rules, outcome
An interpretable first-pilot score whose components can be tested independently. Eligibility failures remove the candidate before scoring.
6.4 Explanation Contract — Example
"Recommended because you completed Python Foundations, selected a data-analyst pathway and have not yet demonstrated SQL. This course is open in your semester and covers SQL querying. It requires approximately three hours per week. Confirm with your adviser if it should count toward your elective requirement."
Name, contact and institution identifier — stored separately
Subjects, skills, goals and recommendation state, pseudonymous ID
Opportunities, source documents and embeddings, no identity
Policy decisions, access and model versions, controlled linkability
Aggregated outcomes; cross-tenant data not pooled by default
The DPDP Rules, 2025 were notified 13 November 2025. Core obligations for consent, security, children, rights and breach response are scheduled for the 18-month phase, beginning 13 May 2027 — this design targets that standard before the deadline.
9.1 Roles
9.3 Children (under 18)
Purpose & minimisation
Notice
Consent
Security
Retention
Rights
Processors
Breach
Cross-border
Accuracy
9.4 Legal Review Gate
Before production, Indian counsel must validate role allocation, children's-data flows, notices, consent/guardian verification, retention and combined incident-reporting obligations. A breach requires an initial report to the Data Protection Board without delay, followed by detailed information within 72 hours unless additional time is allowed.