Trust and data.

For data protection officers and school leaders. What Askel collects, where it’s kept, who can see it and how long it stays.

Checked on 1 Nov 2026

At a glance.

HostingIn the EU, with Cloudflare

Sign-inSchool Google or Microsoft, or an email link

EncryptionWhile data moves, and where it’s stored

Cyber EssentialsIn progress

AINone in Askel

NEA workNot stored in Askel

What we collect, and why.

What Askel collects, and why
Who	What	Why
Students	Name, school email, class, project steps and dates, help given, AI-use records, sign-offs, and a fingerprint for each linked file. For the EPQ, the production log they write in Askel.	To keep the dated record of how the work was made.
Staff	Name, school email, role, comments, sign-offs and statements.	To show who did what, and when.
Partner-review teachers	Name, school email and school.	To let a teacher from another school check marks, only while that review is open.
Display settings	Text size, colours, font, spacing and the reading ruler.	Only to show Askel the way each person chose. On this website, they’re kept in your browser.

Students

WhatName, school email, class, project steps and dates, help given, AI-use records, sign-offs, and a fingerprint for each linked file. For the EPQ, the production log they write in Askel.

WhyTo keep the dated record of how the work was made.

Staff

WhatName, school email, role, comments, sign-offs and statements.

WhyTo show who did what, and when.

Partner-review teachers

WhatName, school email and school.

WhyTo let a teacher from another school check marks, only while that review is open.

Display settings

WhatText size, colours, font, spacing and the reading ruler.

WhyOnly to show Askel the way each person chose. On this website, they’re kept in your browser.

Other companies we use.

These are the other companies we use to run Askel, called sub-processors.

Sub-processors
Company	What for	Where
Cloudflare	Hosting, database and files	EU
Resend	Email
Wonde	Bringing students in from your school’s information system. Only after the pilot, and only if your school chooses it.

Cloudflare

What forHosting, database and files

WhereEU

Resend

What forEmail

Wonde

What forBringing students in from your school’s information system. Only after the pilot, and only if your school chooses it.

Who is responsible.

When a project is linked to your school, your school is the controller: it decides how the data is used. Askel is the processor: it uses the data only as your school asks.
When a student uses Askel on their own, Askel is the controller.

Temporary copies.

When a teacher from another school checks marks, or your teachers check they all mark to the same standard, Askel makes a temporary copy.
Copies use candidate letters, not names, and links by default.
Copies are deleted when the review closes.

How long we keep things.

Your school sets how long records are kept. The default is the deadline for reviews of results.
Records of worries about a piece of work follow the same rule, unless a case is still open.

Security.

Staff sign in with two steps (MFA).
Data is backed up.
We log who opens what.
If anyone changes a record later, it shows. Each day, records are stamped with the time by an outside service.

To report a security worry, email security@askel.uk.

The data protection pack.

Everything your school needs to check Askel, in one pack:

A data processing agreement (DPA)
A model data protection impact assessment (DPIA): a form your school uses to check the risks of a new app
The list of other companies we use
How long we keep each kind of record
A short security summary

Name So we know who to send it to.

Role So we send the right documents.

School Your school’s name.

School email We send the pack here.

We use your details only to send the pack. No tracking cookies. Privacy notice

Accessibility.

Designed to meet WCAG 2.2 AA, the accessibility standard the UK government requires for public sector websites and apps.

Accessibility

From first idea to hand-in, on the record.

Apply to pilot Book a call