Committed to keeping student work safe
EdnasLearn handles the schoolwork of real students, so security isn't a feature, it's a requirement. Here is exactly what we do, in plain language.
Your data stays in Australia
The database and the application both run in Sydney. Student submissions, marks, and feedback are stored and processed in Australia, not shipped overseas for storage.
Encrypted everywhere
All traffic uses HTTPS (TLS), and data is encrypted at rest in the database and file storage. Uploaded worksheets and student essay files live in a private bucket: nothing is publicly accessible, and files are only served through short-lived signed links to the people allowed to see them.
Strict access boundaries
Every request is checked against who owns what. Teachers can only see their own classes and their students' work in those classes; students can only see their own submissions, and only the results their teacher has released. These checks run on the server for every page and API call.
AI that doesn't train on your students
Marking and transcription use Anthropic's Claude via their API, which does not use API data to train models. AI output is assistive: teachers review and can override every mark before students see anything.
We never see card details
Payments are handled entirely by Stripe, a certified PCI Service Provider Level 1. Card numbers are entered on Stripe's pages and never touch our servers.
Verified accounts and abuse protection
Every account requires email verification. Sign-ups, class joining, and AI endpoints are rate limited, and class access requires a join code from the teacher.
Monitored, without exposing students
We use error monitoring so failures surface to us quickly, configured to exclude personal information and student work from error reports.
Minimal data, deletable on request
We collect what the product needs to work: a name, an email, and the schoolwork itself. No advertising trackers, no selling data, ever. You can request deletion of your account and data at any time.
An honest note on certifications
We are a small team and we don't currently hold formal certifications like ISO 27001 or SOC 2. Rather than imply otherwise with badges, we'd rather tell you plainly what we practise: the measures above, a bias toward collecting less data, and fixing security issues before feature work. If your school or centre needs specific security documentation, ask us.
Found a vulnerability?
If you believe you've found a security issue in EdnasLearn, we want to hear about it before anyone else does. Email admin@ednasai.com with the details. We read every report, we'll respond quickly, and we won't take action against good-faith research.
For what we collect and why, see the privacy policy.