Sub-Processors

Here is a list of our sub-processors.

Crisp

Crisp serves as No More Marking's chat support hub for customers and is used for email and in-product communications. It also provides third-party analytics to help understand how users interact with the services. No More Marking shares a limited amount of information with Crisp, including the coordinator's name, phone number, job title, email address, school name, and address. Crisp also collects data for analytics through cookies and similar technologies. Additionally, it can resolve a user's identity information, such as their name and company, from external APIs that get this data from public sources like social networks. All Crisp data is stored on servers located within the EU, specifically with messaging data in the Netherlands and plugin data in Germany.

Brevo

Brevo is the main platform for customer email communication. The data stored on Brevo includes email addresses, names, DfE numbers, and the purchase history of account holders for paid subscription products. This data is stored on either Google Cloud in Belgium or AWS in Ireland.

Amazon Web Services (AWS)

AWS is used to host the website and provide a serverless experience. It also stores media files and the main database. The data center for this service is located in Ireland.

MongoDB Atlas

MongoDB Atlas is No More Marking's primary database, which stores all school, task, and candidate information. This data is stored in Ireland as part of AWS.

Auth0

Auth0 is a user authentication platform that allows users to securely create accounts and sign in. Its servers are located in Frankfurt, within the EU.

Anthropic

Anthropic is utilized for several AI-related tasks, including producing summaries of teachers' audio comments for pupil reports, transcribing anonymized images of writing for assessment, and automated judging. The data is not used to train models unless a conversation is flagged for a Trust & Safety review, a user explicitly reports the material, or a user opts in. The data is deleted from the backend within 30 days of being received or generated. Data may be transferred to and stored on Anthropic's servers in the United States.

OpenAI

OpenAI is used to transcribe teachers' audio comments and anonymized images of writing, as well as for automated judging. OpenAI does not train its models on inputs or outputs from business users unless they explicitly opt-in, which we do not. OpenAI may securely keep API inputs and outputs for up to 30 days to provide services and identify abuse, after which the data is removed unless legally required to be kept. All data is encrypted both at rest and in transit, and it is stored within the US.

Updated on: 01/10/2025