Skip to content
OneRubric

Privacy

Privacy summary

Plain-language intent. Effective terms are governed by the executed agreement.

Draft · pending legal review

This is a plain-language summary of intent, not the binding agreement. The executed Data Processing Agreement and Terms are provided during procurement and onboarding. For the current documents, contact [email protected].

01Who controls the data

The institution is the data controller. OneRubric processes evaluation data on the institution's behalf under a Data Processing Agreement.

02What we collect

Institutional account identifiers for sign-in and role, the rubric responses students submit, and operational logs needed to run and secure the service.

03Student anonymity

Responses are not attributable to a student by faculty or leadership. Minimum-cohort thresholds prevent inference. Anonymity is a processing constraint, not a setting.

04How it's used

Solely to operate evaluation for your institution — scoring, insight, action plans, and accreditation evidence. Never sold, never used to train third-party models.

05Sub-processors

A current list of sub-processors (cloud hosting, payment processing, AI provider) is maintained and provided with the DPA during onboarding.

06Retention & deletion

Retention is configured per institution. On termination, data is exported on request and deleted within the agreed window.

07Your rights

Data-subject and institutional requests are handled through the institution's quality directorate and OneRubric's contact below.

Contact: [email protected]