LMSSecurity and privacy
How we look after your school's data
A plain account of who can see what, what is sent to AI, and what stays with your teachers.
In plain terms
What we do, and what we never do
Each school is kept apart
Every school's records are separated in the database, and every request is checked against the school the person signed in to. A page scanned for one school can never land in another.
No names are sent to AI
Before a page is read, the band at the top with the student's name, roll number and class is cut away. AI services see answers, never who wrote them, and names written inside an answer are removed too.
AI we manage, or your own key
Your school chooses how its AI runs. We can run it for you on our own AI account, with AI usage part of your plan. Or your school brings its own account with an AI provider: Anthropic, Google, OpenAI or an OpenAI-compatible service. Its key is stored encrypted, only its last four characters are ever shown, and it is never used for another school; your school admin can keep the key, the models and the spending cap, and your school pays its AI provider directly. Either way, at the monthly spending cap AI work pauses while code marking carries on.
Teachers release every result
AI suggests marks; a teacher reviews and releases them. Students and parents see nothing marked by AI until then, and every change to a mark is recorded.
Encrypted keys and two-step sign in
Keys and two-step secrets are stored encrypted. School admins and principals must use two-step verification, and everyone else can turn it on. Accounts lock for a while after repeated wrong attempts.
Backed up every night
Your school's data is backed up every night, and the key that protects stored secrets is never part of a backup.
Every AI decision is recorded
Each suggested mark is stored with the model and instructions used, so any mark can be traced and checked later.
Kept only as long as needed
Scanned pages are deleted 60 days after results are released unless your school sets a different period. A school admin can export or anonymise a student's record.
What the AI sees
Answers, never names
Every printed page has a header band with the student's details. LMS knows exactly where it is, because it printed the page, and cuts it away before any answer is read.
Each answer box is then cut out on its own and sent with its question. The AI service sees the handwriting and the question, never the student.
Questions
Questions principals ask
Who at LMS can see our data?
Our support staff can open your school only to help with a problem you raise. Each visit needs a recorded reason, ends after 30 minutes at most, and every action is logged under their name.
Can parents see marks before a teacher has checked them?
No. Marks suggested by AI stay hidden until a teacher releases them. Your school can choose to show multiple choice scores earlier, because code marks those.
Can we get our data out?
Yes. A school admin can export a student's full record, including report cards and scanned pages. If your school leaves, we can export all of its data for you.
What happens to scanned pages?
They are kept for 60 days after results are released, so teachers can check a mark, then deleted. The cut-out answers and typed answers are kept for two sessions. Your school can change these periods.
The full details
Our privacy policy lists what we keep, for how long and who can see it. The terms of service cover how schools use LMS.