Security & Privacy

Security by design

100% EU data residency, encryption, and human control.

✓ Security and privacy built in
✓ Independently audited infrastructure
✓ Everything encrypted and strictly controlled

Core security measures

Security is built into every layer

100% EU data residency

All data is processed and stored within the EU.

End‑to‑end encryption

Data in transit and at rest fully encrypted (TLS 1.3 / AES‑256).

GDPR compliant

Data processing agreement available.

Certified infrastructure

Independently audited (SOC 2 Type II / ISO 27001).

Least‑privilege access

Only authorized roles can access their data.

Strict tenant separation

Data is logically isolated per institution.

Additional measures

Multi‑factor authentication

MFA for all users.

Secure uploads

Direct uploads with temporary secure links.

Retention and deletion

Configurable retention and automatic deletion.

No automated decisions

AI advises, instructors decide.

Privacy & GDPR

Transparent data handling

Clear roles and agreements

Processing agreements with all parties.

100% EU data residency

Data stays within the EU and does not leave.

No training on your data

Your content is never used to train models.

Data minimization

We process only what is necessary.

Data subject rights

Support for access, correction, and deletion.

Our promise

“We work with student work and personal data. Security is a prerequisite, not a feature.”

Security factsheet available
Custom data processing agreement