Each school's data stays its own.Automated tests try, for every role, to read another school's records, and fail the release if they can.
The AI never sees a name.The assistant gets the teacher's sentence and counts. It is never sent a student's name, answer, mark or identifier.
Handwriting reading is opt-in.A school chooses whether to use it. Each student's consent is recorded, and every reading is only a suggestion until a teacher confirms it.
Every mark has a history.When a mark changes, WISCA keeps who changed it, when and why, in a record that cannot be edited afterwards.
Records can be erased.A student's records can be erased on request, and old records are swept on a schedule instead of being kept for ever.
Releases are tested like exams.Before a release reaches a school it goes through hundreds of end-to-end checks in a real browser, on a desktop and on a phone.