1. At a glance
Never sold
We don't sell personal data or use it for advertising.
Encrypted in transit
Every connection to the website and the app uses HTTPS (TLS).
Encrypted at rest Draft
Stored data, including backups, is encrypted.
Least-privilege access Draft
Staff access only what their job needs, with multi-factor sign-in.
Schools own their data Draft
A school's data belongs to the school, and is returned or deleted when it leaves.
Not used to train AI Draft
Our AI providers may not use student content to train their models.
2. Where data is stored
This website, asailearning.com, holds no student data. It's hosted on Microsoft Azure and its content (blog posts, team profiles) is managed in Sanity.
Student and account data is stored in data centres in [region], with our hosting provider [provider]. Draft
If your school needs data kept in a particular country, talk to us before you sign up.
3. How it's protected
- In transit
- All traffic to asailearning.com and the ASAI app is encrypted with HTTPS (TLS).
- At rest Draft
- Databases, uploaded files and backups are encrypted with AES-256.
- Staff access Draft
- Access to production systems is limited to named staff who need it, protected by multi-factor authentication and removed when their role changes.
- Monitoring Draft
- Access to personal data is logged, and unusual activity raises an alert for the team.
- Backups Draft
- Data is backed up daily and kept for up to 90 days, so it can be restored if something goes wrong.
- Spam and abuse Draft
- Public forms, such as the pilot application, are protected against automated spam.
4. Who can see what
- Students
- Their own plan, progress and history.
- Parents
- Their own child's progress and weekly reports.
- Teachers and school leaders
- Progress for the students and classes they're responsible for, at their own school only.
- ASAI staff Draft
- Only when needed to support you or keep the service running, and every access is logged.
Our Privacy Policy covers what we collect and your rights in full.
5. Service providers
We use a small number of trusted providers. Each works under contract and may use data only to provide its service to us.
| Provider | What for | Data involved | Location |
|---|---|---|---|
| Microsoft Azure | Hosts and delivers this website | Standard request details (such as IP address) | To confirm Draft |
| Sanity Draft | Stores website content (blog, team, pages) | No student data | To confirm |
| To confirm Draft | Hosts the ASAI app and its database | Account and learning data | To confirm |
| To confirm Draft | AI model provider for the study modes | Study conversations and uploaded notes | To confirm |
| To confirm Draft | Sends account and receipt emails | Name and email address | To confirm |
We'll tell schools before adding a provider that handles student data. Draft
6. AI and student data
ASAI's study modes use AI to explain topics, ask questions and build study plans. To do that, the relevant parts of a student's conversation and notes are sent to our AI provider.
- Our AI provider may not use student content to train its models, and doesn't keep it longer than needed to respond. Draft
- We don't send names or contact details with study content. Draft
Teachers and parents see a student's progress, not a word-for-word copy of their study conversations. Draft
7. For schools
- Data processing agreement Draft
- We sign a data processing agreement with every school, setting out what we process, why, and how it's protected.
- Security questionnaires
- We'll complete your school's security or vendor questionnaire.
- Roles and permissions Draft
- School admins decide who sees what: teachers see their own classes, leaders see the whole school.
- Leaving ASAI Draft
- When a school leaves, we export its data on request and then delete it within 30 days, and from backups within 90 days.
8. Incidents and reporting
If a security incident affects your data, we'll tell you and the relevant authorities as the law requires, explain what happened and what we're doing about it.
Found a security problem? Email support@asailearning.com with the details. Please give us a chance to fix it before telling anyone else, and don't access other people's data while testing.