Controls
Data and privacy
Student names kept out of internal alerts and third parties
In progressCriticalVerified 15 September 2026ST4S PR10, PR14, AI_G1A
What this control means
Operational alerts and subprocessors receive no student names. One activity alert currently includes the student's typed name; being removed.
What we found
Reviewed every place student activity data leaves the database. One internal alert includes the student's typed name; it is being changed.
How we verified it
- Traced the activity code path from the student's browser to storage, the helper chat, hints, AI marking and notifications.
- AI marking and the helper chat receive the question, the student's answer and their message, never the name.
- One internal Slack alert includes the student's name. A change to remove it is in progress.
Still to do
- Ship the alert change and re-verify.
Questions about this control: security@kuraplan.com