EU-hosted data
Learner data is stored with Supabase (PostgreSQL) in the EU, encrypted in transit and at rest. The application runs on Vercel.
Trust & safety
A clear view of
how we work.
Schools need practical answers about learner data, educator oversight and implementation. Here is our current position, with policies you can review.
No model training
Learner data is never used to train AI models. Educators interpret outputs and decide what comes next.
Assurance in progress
Cyber Essentials and ICO registration are underway. We will publish the certificate and registration number here when they are issued.
Where is platform data hosted?
Learner data is stored with Supabase (PostgreSQL) in the EU and encrypted in transit (TLS) and at rest. The application and delivery layer run on Vercel. The exact split is set out in the information security overview below.
Is learner data used to train AI models?
No. Learner data is never used to train AI models. Acarise uses AI to support learning activities and surface insights; outputs require educator judgement and may be incorrect. Teachers remain responsible for teaching decisions and for reviewing content before relying on it.
What is your current assurance status?
Cyber Essentials certification and ICO registration are in progress. We will update this page when they are complete. Our engineering team performs regular internal security testing.
What should we agree before a pilot?
Review the current product and policy documents with us. Agree account setup, staff responsibilities, the data involved, access, retention and deletion arrangements before introducing learner data.
Who can we contact about data or safeguarding?
For data protection questions, contact contact@acarise.com. Review our safeguarding policy with your school’s designated safeguarding lead as part of pilot planning.
Operational detail
What schools need to evaluate.
Intended use
Acarise supports teacher-led learning activities. Educators review generated material, inspect learner work and make the teaching decisions.
How guidance works
Acarise uses questions, hints and practice to keep learners thinking. AI responses may be inaccurate and should be reviewed in context.
AI provider and data
Acarise uses an established enterprise AI provider under a data-processing agreement. Model training on learner data is contractually disabled. A sub-processor list is available to schools on request.
Retention and deletion
Retention and deletion arrangements are agreed before a school pilot. The privacy policy describes the current categories and periods; schools can raise setting-specific requirements with us.
Safeguarding concerns
Schools should follow their own safeguarding procedures and review our safeguarding policy with their designated safeguarding lead. Report product concerns to contact@acarise.com.
Accessibility
Accessibility is reviewed as the product develops. We do not currently claim a formal conformance level. Tell us about required adjustments or report a barrier before a pilot.
Procurement support
We can provide current policies, company details, hosting and security information, the sub-processor list and pilot-specific answers for your internal review.
Ask a data, safeguarding or procurement question →Review the documents.
For your DPO and procurement team
Each PDF carries its version and effective date. The procurement pack says who should read which document and gives the facts a DPIA needs.
Discuss your requirements →