PlatformDelivery BoardAutomation & RunbooksOutcome ReceiptsJust-in-Time ElevationCredential VaultGoverned SessionsDevices & DiscoveryPatch ManagementReporting & ExportsRoles & Multi-Tenancy
Verified AI OperationsThe Operation LoopCommanded AutonomyCompare the operating modelThe Verified Operation Spec
SolutionsFor MSPsFor Enterprise & Internal ITHealthcareLegalFinancial servicesMunicipal & Education
ProofOperation walkthroughSecurity & architectureVerified Operation SpecFive questions for your RMM's AIChangelog
CompanyAboutFounder's noteContact
PricingBuy 1–20 technician licenses onlinePlans — from $499 per monthCustom requirementsFoundation Circle
Log in

Home/Solutions/Municipal & Education

Municipal & Education

Serve the mission. Account for the work.

Public-sector IT is two jobs at once. There is the work — a lab that has to be ready by 08:00, a clerk who has to publish an agenda before a meeting — and there is the paperwork that follows it, because everything you do is potentially disclosable, auditable, or a line in next year's budget hearing. Seraph does the first job and produces the second as a by-product, one record per machine, ready to release.

One authorization, many targetsOP-100882
R. ALVAREZ · 07:44 one authorization 31 MACHINES IN LAB B WHAT CAME BACK 30 MACHINES lockdown active · verified 1 MACHINE no response captured 31 SEPARATE RECORDS, ONE PER MACHINE THE ONE THAT FAILED RAN ITS DECLARED UNDO
Fan-out does not mean one record for the batch. Each target gets its own operation and its own sealed record, so a single failure is locatable instead of hidden inside a summary.

The characteristic ticket

07:40 on a state-testing morning.

Lab B is booked for testing from 08:15. At 07:40 the readiness check comes back wrong on thirty-one of the thirty-two machines: the exam lockdown extension is not loading after last week's image update. Your district IT team is two people covering nine buildings, one of whom is currently in a different building. Nobody is going to touch thirty-one machines by hand in thirty-five minutes, and the testing coordinator needs an answer, not an apology.

  • 07:42 — one typed outcome, not thirty-one tickets. The outcome is stated once: the lockdown component loads and reports active on each machine in Lab B.
  • 07:44 — one authorization from a named person. Your technology director sees what will run, on which machines, with what rights, and for how long, then approves once.
  • 07:44 — thirty-one operations, not one. Each machine gets its own lease, its own job, its own check, and its own record. That is the difference between a batch and a fleet you can answer questions about.
  • 07:50 — thirty come back verified by the machine itself. One never answers. Its declared undo runs, it is flagged for a person, and its record seals saying exactly that.
  • 08:02 — the coordinator gets a list, not a reassurance. Thirty ready, one bench machine to swap, and a reference number for each.
Why the failure matters more than the successes A tool that reports "batch complete" on thirty-one machines and quietly means thirty is how a testing session gets interrupted at 08:20 in front of a room of students. One record per target is what makes the thirty-first visible. Read how the same rule applies to a patch wave on governed waves.

The second job

When your operations record becomes a public record.

In this sector an IT record is not an internal artifact. It can be requested, it can be read out at a meeting, and it can be attached to a procurement file. Most tooling logs are miserable in that moment — either they say nothing useful, or they are so full of personal and system detail that releasing them means a review nobody has time for. The way out is not redaction. It is a record that never collected the sensitive thing in the first place.

Three questions, one record, three outputsOP-100882
RECORDS REQUEST what did IT do in May THE BOARD, IN PUBLIC who approved that change AN RFP SECURITY ANNEX evidence, not assurances OPERATION RECORD OP-100882 OPERATION restore lockdown TARGET LAB-B-14, 1 of 31 AUTHORIZED BY R. Alvarez · 07:44 ACCESS leased 6 min THE MACHINE SAID lockdown active UNDO declared first RETENTION set by the district THE RESPONSE PACK PDF, CSV or JSON, unmetered THE BOARD ANSWER one reference number THE RFP EXHIBIT the same export, attached THE FIELDS THIS RECORD NEVER COLLECTED, SO THERE IS LESS TO REVIEW BEFORE RELEASE: student names · coursework · what was on the screen · test content · credential values
Release still needs a human eye — a device name or a staff name is a judgement call in some jurisdictions, and we will not pretend otherwise. What changes is the size of the job: the categories that usually make an IT log unreleasable are categories this record was never built to hold.

The people who ask

Four audiences, one artifact.

Who is asking What they actually want What you send
The superintendent, before a board meetingTo not be surprised in public sessionThe month's operations, each with the name of who approved it
The clerk or records officerA response they can release without a week of reviewA period export, in a format their system accepts
The testing or facilities coordinatorWhich machines are ready, right now, and which are notOne record per machine, including the ones that failed
A grant condition or insurance renewalEvidence that privileged access is bounded and reviewedLeases with their scope and expiry, and the authorizations beside them

Municipal and school district IT is not one market and we do not pretend it is. A district's pressure is the calendar — testing windows, term starts, a lab that must work at 08:15. A city or county's pressure is the meeting and the file — an agenda that has to publish, a record that has to be producible. The product is the same; the reason people buy it is not, and a demo that talks about the wrong one is a waste of your afternoon. Tell us which you are when you book.

The other half of the sector

The clerk, ninety minutes before the meeting.

17:35. Council convenes at 19:00. The clerk's workstation lost its mapping to the records share after a policy change, so the agenda packet cannot be assembled, let alone posted for the public notice period.

  • It is not an emergency to anyone but the clerk — until the notice period is missed, at which point it is an item at the next meeting.
  • The fix is small and well-understood. A certified runbook repairs the mapping, with the check that defines success and the way back written down before it runs.
  • The authorization is a person, in one click, and their name stays on the work.
  • The record is the minute. When somebody asks in three months why the packet posted at 18:12, there is a reference number rather than a recollection.

This is the shape of most municipal IT: low drama, hard deadlines, and a long memory. The value of a record here is not security theatre — it is that the answer still exists after everyone has moved on.

Outcome receiptOP-100913
operationrestore share mapping
requested byCity clerk · 17:35
authorized byM. Doyle · 17:38
targetclerk workstation
admin accessleased 5 min · expired 17:43
ranrepair mapping · signed job
the machine saidshare reachable · write ok
undodeclared before execution
packet posted18:12 · inside notice period
chain 61b4…07dd DONE & LOCKED

Straight about scope

What we do not claim here.

  • No FedRAMP or StateRAMP authorization. We do not hold one, we are not in process for one that we can point you at today, and no page on this site implies otherwise.
  • No CJIS claim. If your estate includes systems in scope for criminal-justice information policy, treat Seraph as out of scope for those systems until we have had that conversation properly.
  • No student information system integration. We do not connect to your SIS or LMS and we do not process student records. The work is at the machine, service, account and update layer.
  • We supply evidence; we do not attest. Where a framework matters to you, we produce the operational record your programme needs — never an attestation about it. Our own SOC 2 position is on the trust center.

On procurement: if your purchasing rules require a specific contract vehicle or cooperative agreement, ask us on the demo and we will tell you plainly whether we are on it, rather than sending you a brochure that implies we are. On records law: retention is configurable per client and records live in your own tenant's isolated storage, but your schedule is set by your state's law and your own policy, not by us. And on privacy — student records are your obligation under FERPA and your state's student-privacy statutes; the reason we mention it is that the safest way to help you with a records duty is to not hold the records, which is how this is built.

Fifteen minutes, on a live system

Bring the last records request that took a week to answer.

We will run an operation, produce the record, and export it in the format your response would go out in.