Skip to main content
Heronix PassTrack pilot applications are open for the 2026 school year. Apply for a pilot slot

About Heronix

Heronix exists to give schools a different kind of software relationship.

For the last two decades, school districts have been pushed toward subscription-based, cloud-hosted software that requires continuous connectivity, sends student data to vendor servers, and updates on the vendor's schedule rather than the district's. That model works for vendors. It often does not work for schools.

Heronix builds tools that run on district infrastructure, stay on district infrastructure, and remain under district control. One-time perpetual licenses. No required cloud connectivity. No data leaving the network without explicit authorization. No forced updates mid-school-year.

This isn't a feature list. It's the starting assumption behind every product we build.

How Heronix operates

Heronix Education Systems LLC is a privately held, founder-operated Florida company. Not venture-backed. Not positioned for acquisition. Heronix is built around a clear philosophy and a long-term commitment to the schools it serves.

Guardian: The Heronix Data Gateway

The gateway between Heronix products and the outside world

A dedicated gateway that tokenizes student data before it reaches any outside vendor

Student PII never leaves your network in the clear

Guardian is a dedicated gateway application that deploys inside your network alongside Heronix products. When a Heronix product integrates with an outside system, that traffic is designed to route through Guardian: student PII is tokenized before data crosses the network perimeter, and each external integration receives unique, non-reversible tokens, so the raw student record does not leave your district in the clear.

Guardian is functional and in internal testing ahead of production deployments. Products without external vendor integrations, PassTrack among them, keep all student data on district servers and run without the gateway. Full details in the architecture.

Tokenization at the perimeter

Student PII is replaced with cryptographic tokens before data leaves the network

Per-vendor isolation

Each external integration receives unique tokens, one vendor's breach does not expose others

Minimum data by default

Integrations receive only the fields they need, grades without names, not the full record

Per-vendor token example

Master Token (internal) TKN_ABC123DEF456
Vendor A token VNDA_7H4K9D2X
Vendor B token VNDB_3M8P5K1Q
Vendor C token VNDC_6N2H9L4X

If Vendor A is breached:

Only VNDA_* tokens are exposed. Vendors B and C remain unaffected. Real student identities are not reconstructable from any single vendor's data.

Read the full architecture →

2024
Founded
2026
PassTrack pilot
2027–28
Suite launch

How Heronix pricing works

How a perpetual license compares to a typical SaaS subscription

Typical SaaS

Annual subscription
  • Annual subscription fees
  • Regular price increases
  • Higher 10-year total cost
  • Access ends at subscription end

Heronix

Perpetual license
  • One-time license fee
  • Annual upkeep included in the license terms
  • Lower 10-year total cost
  • The license is perpetual and does not expire

Contact Us

Get in Touch with Heronix Education Systems

Company

Heronix Education Systems LLC

Call Us

(352) 777-6076