Compliance & data protection

• Pupil work is uploaded to private storage — there are no public URLs, and viewing uses short-lived signed links.
• Data is encrypted in transit and at rest.
• Uploaded pupil work is never used to train base AI models.
• Pupil names are read only to label the teacher's folder view; AI feedback and extracted text exclude names and personal data.
• Row-level security means each teacher can only ever see their own classes' data.
• Deleting a pupil's folder removes the scanned pages, marks and feedback in one cascade.

• No pupil accounts and no direct pupil access to the tool — marking is entirely teacher-operated.
• Reports are shared with pupils only when a teacher chooses to send them.
• Teacher-in-the-loop by design: every mark is a draft until the teacher reviews and approves it, and low-confidence marking is flagged for attention.
• Supports DfE generative-AI guidance: staff retain professional judgement over all marking outcomes.

Download our standard DPIA template and GDPR compliance sheet for your IT administrator or DPO — ready to attach to a procurement review.