How TeachEdge Prioritises Data Security and Privacy

Summary: Schools trust TeachEdge with student work, so security and privacy aren't an afterthought — they're built into how the platform operates. Below is a plain-English overview of what data we use, how we protect it, and how we support schools with compliance needs.

Part 1: Data security at TeachEdge — what you need to know

Why data security matters

Protecting personal data — especially that of children — isn't just about meeting legal requirements. It's about trust and safeguarding.

In the UK (and the EU), data protection laws such as GDPR exist to ensure personal data is handled responsibly, with transparency and appropriate security.

In education, extra care is needed because children's data requires stronger protections. That's why TeachEdge is also aligned with the Children's Code (also called the Age-Appropriate Design Code).

Why TeachEdge takes this seriously

At TeachEdge, we're committed to protecting every piece of information entrusted to us.

Schools and teachers use our platform to help students improve their essay-writing skills, and we take that responsibility seriously. Our approach is simple: combine practical AI with privacy-by-design so data stays secure while students and teachers get meaningful learning benefits.

We are also registered with the Information Commissioner's Office (ICO) under Registration Reference: ZB826115.

What data does TeachEdge use — and why?

We collect only the data we need to deliver the service effectively:

• Student name — to identify submissions and provide personalised feedback
• Student email address — to allow secure access to private student portals
• Essay submissions — the core of the service (used to generate feedback for improvement)

What we don't do:

• we do not collect sensitive personal data (e.g. health information) as part of the normal workflow
• we do not use student data for advertising

How does TeachEdge keep data secure?

TeachEdge is built with privacy and security at its core. Key measures include:

1. Secure hosting TeachEdge is hosted on Bubble.io. Where data transfers involve international processing, we use appropriate contractual safeguards (including Standard Contractual Clauses) to support compliance with UK GDPR.

2. Encryption Data is protected using encryption during storage and transmission to reduce the risk of unauthorised access.

3. Privacy by design TeachEdge is designed so access is restricted by default:

   • students can only see their own submissions and feedback
   • teachers can only access data for their own students/classes

4. Alignment with UK GDPR and the Children's Code We follow strict data-minimisation and transparency principles, and aim for high-privacy defaults in line with ICO guidance.

5. Transparency and access control Teachers and schools can monitor and manage student data within the platform, so control remains with the school and the teacher.

6. ICO registration Our ICO registration reflects our commitment to meeting UK data protection obligations.

Part 2: Technical information appendix

This section is for schools (and IT / data teams) who want more detail on how TeachEdge protects data in practice.

1) Hosting and infrastructure

• TeachEdge is hosted on Bubble.io.
• International data transfers: where relevant, we rely on recognised safeguards such as Standard Contractual Clauses (SCCs) to support UK GDPR compliance.

2) Data encryption

• Encryption at rest: when data is stored
• Encryption in transit: when data moves between your device and the platform

3) Access controls (role-based)

TeachEdge uses role-based access principles:

• Students only see their own data
• Teachers can access data for their own classes, not other teachers' students
• Administrative access is restricted to essential personnel

4) Privacy by design

TeachEdge follows Privacy by Design principles, including:

• Data minimisation: collecting only what is needed (name, email, and submitted work)
• Privacy rules: access restricted to authorised users
• Transparency: clear privacy information (including a child-friendly version)

5) Data retention policy

Data is retained only for as long as necessary:

• during active service use
• and for a period after service ends to meet record-keeping requirements (currently up to six years, where applicable)

After the retention period, student data is securely deleted.

6) Security monitoring and testing

We rely on platform-level security monitoring and ongoing improvements, including regular vulnerability scanning and testing practices to reduce risk and maintain robustness.

7) Compliance: UK GDPR and the Children's Code

TeachEdge aims to comply with:

• UK GDPR: lawful, fair, and secure processing
• The Children's Code: including high-privacy defaults, clear explanations, and avoiding unnecessary tracking/profiling of children

8) Disaster recovery and backups

Reliable systems include automated backups and recovery processes designed to reduce the impact of accidental loss or system failure.

9) Tailored Data Protection Impact Assessments (DPIA)

For schools requiring detailed documentation, we can provide a tailored DPIA explaining:

• what data we collect
• how we process it
• key risks and mitigations
• the safeguards in place for UK GDPR and the Children's Code

10) Contact us for reassurance

If your school has specific concerns, or needs documentation for internal sign-off, we're happy to help.

• Email: info@teachedge.ai
• ICO Registration Reference: ZB826115

TeachEdge recognises that schools operate in a highly regulated environment and carry serious responsibility for student data. By building on secure infrastructure, applying robust safeguards, and staying aligned with UK GDPR and the Children's Code, we aim to provide a platform your school can trust.

---

Helpful links

• TeachEdge Privacy Notice: https://teachedge.ai/privacy_notice
• TeachEdge Child-Friendly Privacy Notice: https://teachedge.ai/child_privacy_notice
• ICO guidance on the Children's Code: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/childrens-information/childrens-code-guidance-and-resources/
• ICO register search (to look up registration references): https://ico.org.uk/esdwebpages/search

Gary Roebuck is Head of Economics at Holy Cross School, New Malden and the creator of TeachEdge.