Compliance & Security Hub

Everything your IT and Procurement teams need to approve Class Architect.

Review our standard UK GDPR Data Processing Agreement (DPA), establishing Class Architect as the Processor and your institution as the Controller.

Download a pre-filled Data Protection Impact Assessment (DPIA) template in Word format to submit to your Data Protection Officer.

Read our full Privacy and GDPR policy detailing our strict zero-retention model and automated 24-hour data deletion practices.

Security Architecture Summary

✅ Zero AI Training: Customer data is never used to train or fine-tune our foundation AI models.
✅ Transient Processing: Uploaded student submissions are processed in-memory and permanently wiped immediately after processing.
✅ UK/EU Residency: All data processing occurs via Google Cloud's Enterprise Europe-West2 (London) region.
✅ Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).