Security and GDPR
Safe AI use
Data Processing Agreement
The data processing agreement is in accordance with the Privacy Covenant for Education.
Subprocessors
The AI-School DPIA is leading for the list of subprocessors that fall within the processing in AI-School. Other suppliers or internal administrative systems are not included here because they are outside the scope of processing in AI-School.
Setting Permissions
AI-School security works based on roles with permissions.
View History
AI-School offers the ability to set visibility of student or staff chat history per role. This can be configured in the admin section under Permissions.
Retention Periods
AI-School offers the ability to set retention periods per collection. A collection is a set of similar data. For example, there is a "Schools" collection and a "Chats" collection.
Leaving the App
When a person temporarily leaves the app, it is advisable to set the account to inactive.
Database Structure
Each customer in AI-School receives a separate database in Google Cloud. Security rules can be set on this database, and the administrator can set permissions for reading and writing to this database per role.
Server Security
Personal data used within the application is stored on servers within the European Economic Area.
