Security & Trust

The questions your DPO will ask

Marking.ai processes student work. This section sets out how, where and who else is involved - with the documentation a procurement team needs behind each answer.

Is Marking.ai safe for schools to use with student work?

Marking.ai processes student work in order to mark it, and a teacher approves every mark before a student sees it. Student work is stored in the EU and processed by a named set of sub-processors under Standard Contractual Clauses. We do not train any AI model on student work, and our AI provider is contractually barred from doing so. Our privacy policy, a pre-completed DPIA and a data processing agreement are all available for your assessment.

Verification status

What we can evidence today

Every line below is something we can put a signed document or a line of code behind. It is not everything a procurement team will ask - if what you need is not here, ask us and we will tell you where it has got to, including where the answer is no.

Verification status of Marking.ai's security and data-protection claims, as at 31 August 2026
ClaimStatus
Marks handwritten and typed workYes
Every mark cites the words that earned itYes
A teacher approves before a student sees anythingYes
Starting a trial requires no payment cardYes
Student work is stored in the EU (Frankfurt)Yes
AI processing and transactional email in the US, under Standard Contractual Clauses and the UK AddendumYes
Student work is never used to train an AI model, ours or our provider'sYes
A pre-completed DPIA and a standard DPA, for your assessmentYes
The mechanism

Every mark cites the words that earned it

Marking.ai marks against the marking guide a teacher uploads, criterion by criterion, and returns the exact words in the student's answer behind each mark along with the page they were found on. That is what makes a mark checkable in seconds rather than taken on trust - and it is a fact about how the system works, not a claim about how often it is right.

  • Marked against the teacher's own uploaded guide, not a general standard
  • The exact student text and page number returned behind each mark
  • A teacher reviews and approves every mark before a student sees it
Sample class
GCSE Geography - Coastal Landscapes · Emma Richardson
32/40
Questions
Section A - Physical18/22Question 1.14/4Question 1.25/6Question 1.35/6Question 1.44/6
Section B - Human14/18Question 2.14/4Question 2.25/8Question 2.35/6
Total32/40
Question 1.44/6Review suggestedMarking guide
QuestionUsing a named example, explain how coastal management strategies have been used to protect an area from erosion.Student answer

In Holderness on the East Yorkshire coast, several coastal management strategies have been used. Hard engineering approaches include sea walls at Bridlington and Hornsea, which reflect wave energy to protect the towns behind them. Rock armour has been placed at Mappleton to absorb wave energy. However, these defences have caused problems further down the coast because they interrupt sediment movement, leading to increased erosion at places like Cowden.

StrengthsExcellent use of a named case study with specific locations.Mentions knock-on effects of hard engineering - shows evaluation skills.
Areas for improvement·Evaluation could be more balanced - soft engineering and managed retreat deserve more depth.
Mark breakdown

4 of 6 marks. Strong case study use with specific place names and strategies. The mark scheme awards up to 4 for description and 2 for evaluation - soft engineering and cost-benefit analysis are underdeveloped for full evaluation marks.

Your assessment

The short answers, and the documents behind them

One position per area, stated plainly. The full documentation - our DPIA, our data processing agreement and the security overview - is available for a school's assessment on request.

Data protection

What we hold, where it goes, and who processes it.

Safeguarding

How pupil work is handled, and what is flagged to a person.

Platform security

Where the product runs, who can reach it, and how access is controlled.

Responsible AI

Where the model is used, and where a teacher decides.

See the compliance pack

Built for how schools handle data

  • Data stored in the EU
  • No training on student work
  • A teacher approves every mark
Answers

Common questions

Still stuck?

Ask us anything - a real person answers, in term time.

Ask a question

Will it replace or deskill teachers?

No. Marking.ai drafts; teachers decide. Nothing is released until a teacher approves it. It removes the repetitive first pass so teachers spend more time teaching and on the judgement only they can make.

Who processes student work?

Marking.ai processes student work in order to mark it, and uses Google's Gemini API to do so.

Do you train AI on our students' work?

No. We do not use student work, marking guides, marks or feedback to train, fine-tune or develop any AI model, ours or a third party's, and our AI provider is contractually prohibited from using it to improve its own models. We keep a small test set to measure marking accuracy, which is testing rather than training and which schools can opt out of.

The evidence your DPO will ask for

Ask us for the pack - our DPIA, our data processing agreement and the security overview - and a person will send it. If you would rather be walked through it first, book a demo for your school.