Your data

You decide what leaves your browser

Your roster and identity mapping never leave this browser. You mark and black out names and IDs before anything is uploaded, and only the content you approved is processed. A name handwritten inside an answer is the one case your review has to catch.

Identities stay in your browser

Your roster, student identity mapping, original exams, and accepted results live only in this browser. They are never sent to GradeLogic™.

You redact PII before any upload

Mark PII zones — auto-suggested by local OCR or drawn by hand — and they are blacked out locally. Whole pages can be excluded entirely.

Your confirmation is bound to your files

When you confirm your redaction decisions, we fingerprint your source PDFs and PII zones. If either changes, uploads stop until you review again — a stale confirmation cannot authorize new content.

Only content you confirmed is accepted

The backend accepts assessment content only under a redaction manifest you confirmed, and records a fingerprint of everything it processes. Redaction happens in your browser: your roster never reaches us, and the names and IDs you marked are burned out of the image before it is sent.

Kept only as long as the run needs it

Approved content is processed to complete the operation you asked for, and no copy of it is stored on our servers. The result of a run is kept for about a week so a repeated request cannot charge you twice, then deleted. Assessment content is never used for analytics.

Server-protected, no keys to manage

You never handle AI accounts or keys. Anything processed for you is held only for the run, and every company involved is on our subprocessor list.

You make the final call

GradeLogic™ never decides what is safe to send or turns a draft score into your assessment decision on its own. You do.

PII marking & control

You define and verify every PII zone — auto-suggested by local OCR or drawn by hand — and can exclude whole pages. Nothing is uploaded until you confirm those redaction decisions. Your confirmation is cryptographically bound to your source files and PII zones, so if either changes, uploads stop until you review again.

Control & verify every step

Each pipeline step is yours to inspect. Auto-Pilot pauses at mandatory checkpoints and whenever confidence is low, so you review and correct results before using or exporting them. No step runs past you unseen.

Early access · waitlist open

Privacy you control

Join the waitlist to request access. Once you're in, setup, splitting and review cost nothing; credits are spent only when the AI grades.