This translation is provided for convenience; only the German version is legally binding.
This is a product information page about data protection at Laura, not the legally binding privacy statement. You find the full legal text in the privacy statement. It also lists every service provider that receives data, with purpose, type of data and place of processing.
Usage analysis for personally invited teachers
After registration, public page views, active time, scrolling, click areas and pointer positions are linked to participation. The organiser confirms prior oral consent from the personally invited teachers; there is no further online consent request. No field contents or screen recordings, no analysis in app, login or pupil areas. Supabase Frankfurt, 30 days. You may stop analysis at any time without losing access to the survey or pilot registration. See the privacy notice for details and rights.
privacy statementAI support for school, with data minimisation, RLS, an audit trail and local processing.
For us, data protection is a feature, not a disclaimer. Laura is built so that students' data stays where it belongs, and so that every processing step remains traceable.
The data flow in one sentence
Local by default. Cloud only if you want it, and then pseudonymised.
Local (default)
The batch is processed on the device. Real names, handwriting, contents: everything stays on the teacher's machine first.
Optional: pseudonymised cloud (opt-in)
Only when you actively agree do pseudonymised contents go into the cloud. The link to the person stays local, and this step is always a conscious click. Recognition then runs at Google and, for the second reading, at Anthropic; both are based in the USA. The name field is blacked out, and stored real names are replaced before sending.
Processing modes
Three clearly separated processing stages. The most data-sparing mode is always the default.
| Mode | What happens | Status |
|---|---|---|
| local | Processing runs on the teacher's device, the data never leaves it. | Default |
| pseudonymized_cloud | Only pseudonymised contents go into the cloud, real names stay local. The page images are received by Google and Anthropic in the USA. | Opt-in |
| full_cloud | Full cloud processing, active only after an explicit opt-in. The recipients are the same as in the pseudonymised mode. | Opt-in |
Technical and organisational measures
Data protection built into the product, principle by principle.
Local-First
Data leaves the device only with a conscious click. No silent upload, no background sync.
Row-Level-Security
The school is a hard boundary. RLS makes sure that no foreign classes or houses become visible.
Append-only audit hash chain
Every step is logged in a SHA-256 hash chain, so any tampering becomes visible.
No covert device scanning
There is no secret device scan. Attendance runs only via a voluntary QR check-in.
Audio only with a consent gate
Voice recordings sit behind a consent gate. Without consent, nothing is recorded.
Retention and deletion
The retention periods per data type are defined, but the automatic deletion run is not built yet. Until then the school deletes by hand. We say so openly instead of promising an automation.
What your DPO gets from us
We deliver the documents that make a serious data protection review possible, and we keep the responsibility where it belongs: with the teacher.
Data processing agreement template
A data processing agreement as a template, prepared for review by your data protection officer.
Review obligation
Proposals stay proposals. Every relevant assessment goes through a human review.
No automatic final grade
Laura never sets a final grade on its own. The decision stays with the teacher.
Request the GDPR pack
You can request the data processing agreement template, overview of technical and organisational measures and processing documentation by email. The link opens your email app; your request reaches us only after you send it yourself.
Open email requestThis page does not store your email address or send anything automatically. datenschutz@laura.school
Documents to request
- Data processing agreement template (DE/EN)
- Overview of technical and organisational measures
- Processing documentation
- Deletion concept
- List of recipients with purpose and place of processing