Secure Local AI Deployment

NAS Jiaxing Implementation Guide — PIPL Compliant, On-Premises AI for International Schools

Updated: 2026-06-19 | Built by HER | Reviewed by Kimi

Why Local AI?

Cloud AI services (ChatGPT, Claude, etc.) process data on offshore servers, creating compliance risks under PIPL (Personal Information Protection Law) and safeguarding obligations. Local deployment keeps all student data within the school network.

Key Benefit: Zero data leaves the building. Full audit trail. Fixed costs.

中文

为什么选择本地AI？

云端AI服务（ChatGPT、Claude等）在境外服务器处理数据，违反《个人信息保护法》及学校安全保障义务。本地部署确保所有学生数据留在校内网络。

核心优势：数据零出境。完整审计追踪。固定成本。

PIPL Compliance Checklist / 个人信息保护合规清单

Data stored on physical hardware in China
Explicit consent obtained for AI processing
Data minimization: only necessary data processed
Retention period defined (e.g., 30 days for query logs)
Deletion procedure documented
Data processing agreement on file
DPIA completed before deployment
Staff training on data protection completed
Incident response plan documented
Regular audits scheduled (quarterly)

中文

数据存储于中国境内物理服务器
获得AI处理的明确同意
数据最小化：仅处理必要数据
定义保留期限（如查询日志30天）
删除程序已记录
数据处理协议已存档
部署前完成数据保护影响评估
完成员工数据保护培训
事件响应计划已记录
定期审计已安排（季度）

Safeguarding with AI / AI安全保障

All AI queries are logged with user ID, timestamp, and role. Pastoral and SEN data is auto-encrypted. Unauthorized queries containing student names are blocked.

                        Audit Sample:

                        [2026-06-19 10:05:42] USER: admin | ROLE: VP

                        QUERY: "Summarize pastoral report #2026-044"

                        STATUS: ✓ ALLOWED | NOTE: SEN flag — auto-encrypted

中文

所有AI查询记录用户ID、时间戳和角色。教牧和特殊教育需求数据自动加密。包含学生姓名的未授权查询被阻止。

                        审计示例：

                        [2026-06-19 10:05:42] 用户：admin | 角色：副校长

                        查询："总结教牧报告 #2026-044"

                        状态：✓ 允许 | 备注：SEN标记 — 自动加密

Infrastructure / 基础设施

Current Deployment:

🖥️ Server: HIM (AMD Ryzen 7 7800X3D, 32GB RAM)
📍 Location: NAS Jiaxing Server Room
🔒 Network: School LAN only (no public IP)
💾 Backup: 8TB local + GitHub + GitLab
🌐 Remote Admin: Tailscale VPN (encrypted)

中文

当前部署：

🖥️ 服务器：HIM（AMD Ryzen 7 7800X3D，32GB内存）
📍 位置：NAS嘉兴服务器机房
🔒 网络：仅学校局域网（无公网IP）
💾 备份：8TB本地 + GitHub + GitLab
🌐 远程管理：Tailscale VPN（加密）

Related Resources / 相关资源

📚 Secure Local AI Deployment Workshop

Full 20-slide PD workshop with hardware builds, sample scripts, and implementation roadmap. 包含完整的20页专业发展研讨会，硬件配置、示例脚本和实施路线图。

🎓 AI Tools for Educators

First PD workshop — AI basics, hands-on lesson planning, 6 ready-to-use tools. 第一个PD研讨会——AI基础、实践课程规划、6个即用工具。

🖥️ AI Fleet Overview

Complete hardware inventory and network architecture for NAS Jiaxing. NAS嘉兴完整硬件清单和网络架构。

🇨🇳 China Compliance Strategy

Two-site strategy for ICP compliance and public-facing content. 双站点ICP合规策略及面向公众的内容方案。

NAS Jiaxing — Secure Local AI Deployment

Built by HER | Reviewed by Kimi | 0604.ai

Last Updated: 2026-06-19