Open source · AGPL-3.0 · OneRoster 1.1
Chalk already knows your students.
Device tracking and a help desk that populate themselves from your SIS. Install to a populated inventory in 30 minutes, zero CSVs.
Supports PowerSchool · Skyward · Infinite Campus · OneRoster CSV
What's included
One binary: devices, help desk, rostering, SSO, and Workspace sync. Self-hosted is free forever and feature-complete — nothing here is held back behind a license key.
Device tracking that fills itself in
Chromebooks from Google Admin, Windows laptops from Intune, iPads from Jamf — one inventory, tracked against real students because Chalk already has the roster. Check-out desk with phone-camera scanning, repairs that pull parts from stock, warranty answered right on the ticket, purchase orders and funding sources, and a shareable fleet dashboard.
A help desk that knows who is asking
Tickets arrive already attached to a student, their school, and their device. Assignment, SLAs, routing rules, canned responses, CSAT, a knowledge base, and a staff portal with magic-link sign-in.
Roster sync, your way
OneRoster 1.1 push and pull for PowerSchool, Skyward, Infinite Campus, and any OneRoster CSV source. No vendor lock-in.
Self-hosted SAML 2.0 IDP
Be your own identity provider. Auto-generated keypairs, SAML metadata endpoint, sessions, and audit logs out of the box.
Google Workspace + Active Directory
Provision OUs, classrooms, and groups in Google Workspace. Sync to on-prem AD or Entra. Dry-run previews and scheduled runs.
OneRoster REST API + webhooks
Chalk becomes your district's roster API. Read-only OneRoster endpoints and HMAC-signed webhooks for real-time integration.
Shipping today
Built on a roster layer that is already running in production
Devices and the help desk sit on the same roster sync everything below runs on — which is why device and ticket data populates itself instead of living in a spreadsheet.
Every major SIS
PowerSchool, Skyward, and Infinite Campus over OneRoster 1.1, plus any OneRoster CSV export as a first-class source.
SSO for staff and for kindergartners
SAML 2.0 IDP, OIDC federation, Argon2id passwords, and QR badge + picture-password login for students who cannot yet type.
Provisioning with a dry run
Google Workspace users, OUs, Classroom rosters, and Groups — plus on-prem AD and Entra. See the diff before any write hits production.
Already using Snipe-IT?
Snipe-IT is a good asset tracker. It has no help desk, no SIS connectors, and no idea who your students are. Chalk puts all three inside one annual number in the same range — though Snipe-IT's entry hosting tier is cheaper than any Chalk rung, and we say so on the comparison.
Built for district IT
AES-256 encryption at rest, per-tenant key isolation, audit logging, CSRF protection, and a master-key rotation path that never takes the platform offline.
Ready to roll out?
Run Chalk on your own infrastructure free forever under AGPL-3.0, or let us host it — starting with a free Chromebooks-only tier and priced from there.