Excellent processes student exam papers, so protecting that data is the whole job. This page explains, in plain language, how we handle it. It is a description of our practices, not legal advice — schools remain the data controllers for their students' records.
Excellent acts as a “school official” service provider under FERPA: we process student education records only to deliver grading to the teacher and school that uploaded them, and for no other purpose.
We do not disclose student records to third parties except the infrastructure providers required to run the service (database, file storage, and the AI grading model), each bound by their own data-protection terms.
Every scan, answer, and report belongs to a single workspace and is protected by row-level security so it is visible only to members of that workspace.
Files are uploaded to private storage buckets — not public URLs — and access is granted through short-lived signed links. Data is encrypted in transit (TLS).
Student answers are sent to the grading model solely to produce scores and feedback for that submission. They are not used to train or fine-tune any AI model, and they are not sold or shared for advertising.
The teacher always reviews and can override the AI before any score is final — the AI suggests, you decide.
You can delete a scan, a student, an exam, or your entire workspace at any time, which removes the associated records and files from storage.
On request we will help a school export or delete student data to support its own retention and records policies.