Trust & Security
Built for schools that take student data seriously
The short version: we don't sell your students' work, we don't share it with other schools, and we don't train AI on it. The full version is below, written for data officers, not lawyers.
No training on student work
Your students' writing never trains an AI model. Not ours, not anyone else's. Ever.
No selling. No sharing
Not to advertisers. Not to other schools. Not to other teachers. Not to anyone.
Teachers approve every grade
AI suggests. Teachers decide. No grade is final without a teacher saying so.
Photos pass through. Records stay
Photos are processed for grading and then discarded. The grades and rubrics you confirm stay with your account.
Your school's AI policy comes first
Bring your AI policy. We adapt to it without changing how your teachers work.
Delete any time
One click in your account wipes your runs, grades, and student records. No retention, no escrow, no excuses.
Data flow
How student work moves through Grade Coach
- 1A teacher uploads photos of student work.
- 2Photos are sent to the AI model provider for analysis.
- 3The model returns suggested grades against the teacher's rubric.
- 4The teacher reviews, edits, and approves every grade.
- 5The teacher exports the grade sheet (CSV / Google Sheets / PDF).
- 6Photos are discarded when the grading session ends. Grades, rubrics, and your edits stay with your account so you can return to them, never used to train AI, never sold, never shared.
Subprocessors
Who we use, what they do
| Provider |
|---|
Netlify Hosting & serverless functions |
AI model provider AI grading & worksheet analysis |
Supabase Accounts & historical records |
Stripe Payments |
PostHog Anonymous product analytics |
Meta Pixel Ad measurement |
We'll keep this list current. When we add or change a subprocessor, this page is updated and school-plan customers are notified in advance.
Compliance posture
Where we stand on the standards schools care about
GDPR-aligned
Data minimisation, purpose limitation, and the right to deletion are baked into the product.
FERPA-aligned
Teachers act under their school's direction; Grade Coach is a school official under FERPA's direct-control test.
DPA available
We'll sign your school's DPA template, or send ours. Just ask via the contact form.
Data residency
Regional residency is available on the school plan. Talk to us about your jurisdiction.
Your data, your call
Retention, deletion, and export
Kept only while you use it
Your classes, student work, and results are stored for as long as your account is active, solely to run the product for you. Nothing is used to train AI models or sold, ever.
Deleted when you say so
You can delete individual grading runs at any time, or delete your whole account from the Account page: that removes your classes, students, results, and mastery records. Stripe retains its own billing records under its policies.
Take everything with you
Signed-in teachers can download a complete export of their data (classes, rosters, grading runs, scores, feedback, and the mastery record) as a zip of JSON files. Ask us or use the export endpoint from your account.
Talk to us
A question your data officer needs answered?
Send it over. We'll reply within one working day with whatever your procurement process needs, DPA, security questionnaire, anything.
See also: Privacy policy · Terms of service