Student Data & Safety

Last updated 10 September 2026

DeepMark is a teacher-facing tool, designed for UK schools. We do not interact directly with students and do not take on school safeguarding responsibilities. Our role is to ensure that any student work processed through DeepMark is handled securely, minimally, and in full compliance with UK data protection law. Student data is never used to train AI models.

What DeepMark does

  • Processes student work uploaded by teachers
  • Generates suggested marks and feedback
  • Stores scripts securely for teacher access

What DeepMark does not do

  • No direct student interaction
  • No behavioural tracking
  • No automated decision-making affecting students

Data protection

  • UK-hosted infrastructure (AWS London)
  • Encryption in transit and at rest (HTTPS / TLS)
  • Access restricted to authenticated teachers
  • No resale or secondary use of data

AI usage

DeepMark uses enterprise AI services under strict agreements where customer data is not used for model training.

All AI-generated marks and feedback are suggestions only. Teachers remain fully in control and must review all outputs.

Handling student data

  • Works with anonymised scripts or student IDs
  • Student names are optional
  • Schools control the level of identifiability

DeepMark is designed to minimise reliance on personal data wherever possible.

Roles and responsibilities

Schools act as Data Controllers.

DeepMark acts as a Data Processor for student data.

Data retention and deletion

  • Data is kept until you delete it — there is no automatic expiry
  • Scripts and papers can be deleted at any time, which removes their scans, source files and marking documents
  • Full account deletion available on request

Adoption guidance

Teachers can trial DeepMark using anonymised or sample data. Use involving identifiable data should follow school approval processes. A Data Processing Agreement (DPA) is available to support rollout.

Subprocessors

  • AWS — secure storage and compute (UK, London)
  • Google Cloud Vision — OCR processing (EU)
  • Google Vertex AI — marking (EU, Frankfurt)

For the full list with regions and transfer safeguards, see our Privacy Policy.

Need documentation for approval?

We provide a Data Processing Agreement (DPA), Privacy Policy, and supporting documentation for school review. Email support@getdeepmark.com to request a copy.

DeepMark is designed to operate within school governance frameworks — not bypass them.