Articles on: GDPR

Sub-Processors

List of Sub-processors

Updated 26th January 2026


Amazon Web Services (AWS)

AWS is used to host the website, provide a serverless experience, and store media files and the main database.

  • Infrastructure & Storage: The primary data centers and databases are located in Ireland.
  • Transcription (OLMOCR): AWS hosts the OLMOCR model, which is the primary tool for transcribing handwritten scripts. This model runs on an endpoint located in the AWS US region; however, this is for processing purposes only. No data is stored in the US region during this process, ensuring that the persistent storage of your data remains within the core secure environment in Ireland.

Google Cloud

Google Cloud is utilized for initial document processing to separate handwriting from pupil identifying information (e.g., names).

  • Data Residency: No More Marking utilizes the regional EU endpoint (eu-vision.googleapis.com), ensuring that image processing is restricted to Google Cloud regions within the European Union.
  • Data Security & Usage: For immediate response operations, image data is processed in memory and not persisted to disk. Google does not claim ownership of the content, does not share it with third parties, and does not use the images to train or improve its machine learning models. The service complies with the Cloud Data Processing Addendum.

Anthropic

Anthropic is utilized for specific AI-related tasks, including producing summaries of teachers' audio comments for pupil reports and customizing teacher-provided AI judging prompts. The data is not used to train models unless a conversation is flagged for a Trust & Safety review, a user explicitly reports the material, or a user opts in. The data is deleted from the backend within 30 days of being received or generated. Data may be transferred to and stored on Anthropic's servers in the United States.

OpenAI

OpenAI is used to transcribe teachers' audio comments and for automated judging. OpenAI does not train its models on inputs or outputs from business users unless they explicitly opt-in, which we do not. OpenAI may securely keep API inputs and outputs for up to 30 days to provide services and identify abuse, after which the data is removed unless legally required to be kept. All data is encrypted both at rest and in transit and is stored within the US.

MongoDB Atlas

MongoDB Atlas is No More Marking's primary database, which stores all school, task, and candidate information. This data is stored in Ireland as part of AWS.

Auth0

Auth0 is a user authentication platform that allows users to securely create accounts and sign in. Its servers are located in Frankfurt, within the EU.

Crisp

Crisp serves as No More Marking's chat support hub for customers and is used for email and in-product communications. It also provides third-party analytics to help understand how users interact with the services. All Crisp data is stored on servers located within the EU (Netherlands and Germany).

Brevo

Brevo is the main platform for customer email communication. This data is stored on either Google Cloud in Belgium or AWS in Ireland.

Updated on: 26/01/2026

Was this article helpful?

Share your feedback

Cancel

Thank you!