Your institution's data,
protected by design.
GoGrade AI is built to keep student and assessment data private, isolated, and secure — so schools, colleges, and coaching institutes can evaluate with confidence.
Tenant Isolation
Every institution runs in a dedicated, isolated workspace (separate database schema and subdomain). One school can never access another school's data.
Encryption Everywhere
Data is encrypted in transit with TLS and encrypted at rest by default on Google Cloud — covering answer sheets, scores, and student records.
Role-Based Access & MFA
Granular roles (admin, teacher, student, parent) ensure users see only what they should. Administrator and platform accounts are protected with multi-factor authentication.
AI With Human Oversight
AI evaluation is assistive. Teachers review and can override every score. Assessment content is processed to generate results and is not used to train external AI models.
Trusted Infrastructure
Hosted on Google Cloud Platform (GCP) with managed, industry-standard infrastructure. Payments run on Cashfree's hosted checkout — we never store card details.
Audit & Accountability
Platform actions are logged for traceability. Any support access is controlled and recorded, giving institutions clear accountability.
How we handle your data
Collection
We collect only what's needed for evaluation — answer sheets, question papers, rubrics, scores, and student identifiers provided by your institution.
In transit
All data moves over encrypted TLS connections.
At rest
Stored on Google Cloud with encryption at rest enabled by default, within isolated per-tenant storage.
Processing
Answer sheets are processed by our AI pipeline to extract answers and suggest scores against your answer key. This content is not used to train external AI models.
Retention
We retain institutional data for the contract term plus 60 days, unless a longer period is required by law or agreed in writing.
Deletion & offboarding
On request or at offboarding, we export and then delete or anonymise your tenant data within the defined retention window.
Compliance & standards
We follow industry-standard security practices and align our processing with applicable data-protection law.
India DPDP Act, 2023
We align our data handling with India's Digital Personal Data Protection Act. Your institution acts as the Data Fiduciary (controller); we act as a Data Processor handling data on your instructions.
Data Processing Agreement (DPA)
We can sign a DPA that sets out roles, security obligations, subprocessors, and data-handling commitments for your institution.
GDPR (where applicable)
For institutions or users in scope of GDPR, we support processing on a lawful basis with appropriate safeguards.
ISO/IEC 27001 (on roadmap)
We are working toward formal information-security certification as we scale. We do not claim certifications we have not yet achieved.
Need a security review or DPA?
We're happy to walk your IT and procurement teams through our security posture and sign a Data Processing Agreement. Reach out and we'll help.
GoGrade AI is operated by DevsTree IT Services Private Limited.
See also our Privacy Policy and Terms of Use.