Security and children's data

In place

What is sent to the AI provider

For drafts of feedback, progress comments, pupil reports, lesson ideas, exit-ticket questions, governors' reports and leadership insights, and for the AI marking commentary in the mark book, Mosaic Assist sends what you type or paste to the AI provider word for word. Nothing is taken out of it, so keep sensitive detail out of it. The figures for a governors' report or an insight start from the figures on screen and can include pupils' full names.

Mosaic also adds the pupil's first name to feedback, progress comments, pupil reports and the marking commentary, but never their surname, unique pupil number, date of birth, or the sealed medical, ethnicity and SEN fields. Feedback and the marking commentary also send the subject and the name of the assessment. A pupil report also sends the pupil's attendance, behaviour, detention, homework and recent results figures for the school year so far.

The AI mark button in the mark book sends the pupil's work exactly as you paste it, so a name or an e-mail address in the work reaches the provider. Its commentary suggests one mark band for the whole piece, not a mark; you decide the mark.

AI marking proposals, in the mark book's AI marking review tab, work differently. They send the text of the work a pupil handed in and your mark scheme. Before it is sent, Mosaic takes out pupils' full names as the school records them, and details such as e-mail addresses, phone numbers and postcodes. The provider is not told whose work it is, but a first name on its own, or a name the school does not hold, can still be sent. The AI proposes a mark band for each criterion; you review the proposal and decide the mark.

Other AI features send what they work from. A draft reply to a message sends the latest message in the thread and the thread's subject and, when the thread is about a pupil, the pupil's first name and figures. The morning brief sends only the date, your class codes and lesson times, and counts. Quiz generation sends the topic you type, or the title and objectives of the scheme-of-work unit you choose, with the year group and question settings. The census explanations send the validation rules that were raised and how often, with no pupil or staff details.

The provider is a third party (Anthropic's Claude API). A school should have a data processing agreement and a data protection impact assessment in place before it uses Mosaic's AI features with pupil data.

Automatic screening of notes for sensitive detail is planned, not built.

This website

This site sets no cookies and shows no advertising. It counts visits with Umami, a web analytics service. The privacy notice lists what Umami receives.