Trust

Security & Data

Schools and parents trust us with information about children. This page explains, in plain terms, where that data is kept, how it's protected, who can see it and what we commit to.

Last updated
2 Oct 2026
For
Schools, IT and data protection leads, parents

1. At a glance

  • Never sold

    We don't sell personal data or use it for advertising.

  • Encrypted in transit

    Every connection to the website and the app uses HTTPS (TLS).

2. Where data is stored

This website, asailearning.com, holds no student data. It's hosted on Microsoft Azure and its content (blog posts, team profiles) is managed in Sanity.

If your school needs data kept in a particular country, talk to us before you sign up.

3. How it's protected

In transit
All traffic to asailearning.com and the ASAI app is encrypted with HTTPS (TLS).

4. Who can see what

Students
Their own plan, progress and history.
Parents
Their own child's progress and weekly reports.
Teachers and school leaders
Progress for the students and classes they're responsible for, at their own school only.

Our Privacy Policy covers what we collect and your rights in full.

5. Service providers

We use a small number of trusted providers. Each works under contract and may use data only to provide its service to us.

ProviderWhat forData involvedLocation
Microsoft Azure Hosts and delivers this websiteStandard request details (such as IP address)—

6. AI and student data

ASAI's study modes use AI to explain topics, ask questions and build study plans. To do that, the relevant parts of a student's conversation and notes are sent to our AI provider.

7. For schools

Security questionnaires
We'll complete your school's security or vendor questionnaire.

8. Incidents and reporting

If a security incident affects your data, we'll tell you and the relevant authorities as the law requires, explain what happened and what we're doing about it.

Found a security problem? Email [email protected] with the details. Please give us a chance to fix it before telling anyone else, and don't access other people's data while testing.