Sub-Processors for Double Marker

List of Sub-processors

Updated 6 October 2026

No More Marking uses the following service providers to support its assessment services and DoubleMarker. The data each provider processes depends on the features used.

Our main assessment databases and media storage are hosted in Ireland. Some supporting services and AI providers process data internationally, as described below.

Amazon Web Services (AWS)

AWS provides infrastructure, file storage and document-processing services. This includes storing uploaded pupil scripts, scan images and generated reports, and converting documents into PDFs and images.

• Infrastructure and storage: Our primary AWS storage is in Ireland.
• Handwriting transcription: The AWS-hosted OLMOCR endpoint described in our existing service processes handwritten scripts in the United States. This processing location is separate from our primary storage location.

MongoDB Atlas

MongoDB Atlas stores school, pupil, task, assessment and marking information, together with application records needed to manage access and processing.

• Data residency: Our main MongoDB Atlas databases are hosted on AWS in Ireland.

Vercel

Vercel hosts DoubleMarker and our administrative utilities, and runs application services that handle requests and background work. Depending on the operation, these services process account information, school and pupil data, assessment content and operational logs.

• Data residency: Vercel operates global infrastructure. Processing can take place outside the EU, including in the United States, even where application functions run in an EU region. See Vercel’s security and compliance information.

Clerk

Clerk provides authentication and user account management for DoubleMarker. It processes user names, email addresses, account identifiers, roles and authentication information.

• Data residency: Clerk states that its infrastructure is hosted in the United States and that it does not offer regional data residency. See Clerk’s security and compliance information.

Google — Cloud Vision and Gemini API

Google provides document-processing and AI services.

• Cloud Vision: Used for initial document processing, including separating handwriting from pupil identifying information. This service uses the regional EU endpoint, eu-vision.googleapis.com.
• Gemini API: Used for teacher voice-note transcription, marker summaries and scan-processing fallback. Depending on the feature, Google receives audio recordings, scan images, transcribed comments, pupil names and class groups.
• Data residency and usage: The Cloud Vision EU endpoint does not establish EU residency for Gemini processing. Google’s paid Gemini API terms state that prompts and responses are not used to improve its products, but may be logged temporarily for safety, security and legal purposes in countries where Google or its agents operate. See Google’s Gemini API terms.

OpenAI

OpenAI supports AI assessment features, including scan interpretation, feedback, summaries and automated judging. Depending on the feature, it processes pupil response images or transcriptions, assessment instructions and associated context. Scan images may contain pupil identifying information.

• Data usage and retention: OpenAI states that API inputs and outputs are not used to train its models unless the customer opts in. Abuse-monitoring logs may be retained for up to 30 days; additional retention depends on the API features and data controls used. EU-only processing should not be assumed. See OpenAI’s API data controls.

Resend

Resend delivers transactional emails, including invitations, authentication messages and marking notifications. It processes recipient email addresses, email content and delivery information. Messages may include user names, school or task details and links to the service.

• Data residency: Resend’s privacy policy describes transferring data to the United States for processing. See Resend’s privacy policy.

Typesafe AI — Jev

Typesafe AI provides the Jev API to assess copying from the question.

• Data residency and usage: Typesafe’s privacy policy states that its services are hosted in the United States and that it does not train or fine-tune models on customer inputs. Retention is governed by the applicable agreement and service configuration. See Typesafe’s privacy policy and data processing addendum.

Updated on: 06/10/2026