What this page is
This page is the plain-English answer to "what happens to student work on checkb.tech?". It is written for teachers and for the data protection leads at schools and colleges.
checkb.tech checks submitted evidence against BTEC criteria and points to supporting passages and gaps. The assessor verifies the evidence and makes the assessment decision. This page describes what data the current application stores and where its deletion behavior is limited.
Questions or corrections: support@checkb.tech. Ask us for current storage and deletion details before uploading student work.
What happens when you upload a script
1. Your browser uploads the file directly to S3-compatible object storage (Tigris) using a pre-signed link — the file never passes through a personal machine or inbox.
2. The server extracts the text of the document. Only this extracted text is used for analysis.
3. The extracted text is sent to our AI model provider (Doubao via Zenmux) together with the unit's grading criteria. The service returns advisory criterion statuses and points to evidence passages and gaps for the assessor to review.
4. Verdicts and request data are stored for consistent re-checking.
5. Deleting an in-app record removes database data, but the current deletion flow does not confirm deletion of the corresponding cloud file. Contact support@checkb.tech for storage and deletion requests.
Who else is involved (sub-processors)
| Service | What they receive and why |
|---|
| Cloud Object Storage | S3-compatible storage for submitted student files. The application does not currently configure a scheduled expiration for completed submissions. |
| AI Model Inference | Processes extracted coursework text against Pearson unit specifications. The application also stores extracted text and results in its database for re-checking. |
| Relational Database | Hosted in the European Union (EU). Stores centre configurations, submission records, extracted text, and verification results. |
| Authentication & Identity | Secure educator session management and passwordless login tokens. |
| Edge Application Hosting | Enterprise edge application delivery and serverless request execution. |
| Payment Processing | PCI-DSS Level 1 certified merchant of record for institutional subscriptions. Payment credentials are never handled by checkb.tech. |
| Product Diagnostics | Telemetry for software error monitoring and reliability. Never receives student assignments. |
Where data lives
Our database is hosted in the EU (Turso). The AI model provider, Doubao via Zenmux, is a China-based company — if that raises an international transfer question for your centre, raise it with us. It is exactly the kind of feedback that changes what we build.
Current processing locations for every provider are listed in the schedule attached to our data processing agreement.
Anonymisation
You do not need to give us learner names for anything to work. We recommend uploading work identified by initials or learner numbers — and so do the schools we pilot with.
If learners' names are inside uploaded documents, they are treated as personal data exactly as described on this page.
Storage and deletion
The current application stores submitted files in cloud object storage and keeps submission records, extracted text, and verification results in its database. It does not publish a retention period for completed submissions. A one-day lifecycle rule applies to abandoned upload chunks only.
Removing a file or student deletes associated database records, but the current deletion flow does not confirm deletion of the stored file object. Contact support@checkb.tech for storage and deletion requests.
Security
Files are encrypted in transit (TLS) and at rest in storage. Access is limited to the operator (currently a single person — the founder). Provider credentials are stored as environment secrets, not in code or repositories.
There are no advertising trackers or social media pixels anywhere on the site.
Data processing agreement for schools and colleges
Schools, colleges and training providers can have a data processing agreement (DPA) in place before anyone uploads anything — pilots included.
Email support@checkb.tech and we will send our current DPA with the sub-processor schedule for your data protection lead to review.
Contact and changes
This page is maintained alongside our Privacy Policy. If anything here conflicts with what the product actually does, that is a bug we want to know about: support@checkb.tech.
Last updated: August 2026