Responsible AI & compliance
AI that supports academic judgement, rather than replacing it.
Assessment decisions shape students’ progression and futures. GenRate is designed so that AI supports educators rather than replacing them, and so that institutions can meet their own legal and regulatory obligations with confidence.
Our principles
Six commitments behind every feature
- Academic judgement stays human
- GenRate generates, analyses and recommends. It is designed so that educators review and approve consequential assessment decisions, and can edit or override anything it produces.
- Grounded in evidence
- Outputs are designed to draw on the institution's approved curriculum, learning outcomes and course material — not on generic, unverifiable content.
- Transparent and explainable
- AI-assisted content is designed to be clearly identified, and recommendations to show the evidence behind them, so staff and students can understand and question them.
- Fair to every student
- GenRate is designed so institutions can review AI-assisted outcomes across student groups. We treat unfair differences in treatment as defects to be fixed.
- Private by design
- Designed around data minimisation, purpose limitation, tenant isolation and role-based access, so student data is used only for the purposes an institution sets.
- Accountable
- Designed to record who did what and when, so decisions can be traced, reviewed and, where needed, challenged.
Human oversight
Designed for educator control
These controls describe how GenRate is designed to keep people in charge of consequential assessment decisions.
- Educator review
- AI-generated assessments, marks and feedback are designed to be reviewed by educators before they reach students.
- Edit and override
- Designed so educators can change or reject any AI suggestion, and their decision is the one that counts.
- Clear labelling
- AI-assisted content is designed to be identifiable as such, inside the product and to students where institutions require it.
- Traceability
- Outputs are designed to link back to the outcomes, sources and rules they used.
- Audit trail
- Changes to assessments and grades are designed to be recorded for review and moderation.
- Contestability
- Designed so students and staff can query an outcome through the institution's existing academic processes.
Regulations and standards
The frameworks our governance is designed with reference to
Institutions remain responsible for their own compliance. GenRate is designed to support it.
UK GDPR, Data Protection Act 2018 and EU GDPR
What it covers
How personal data — including student data — is collected, used, stored and protected.
How GenRate approaches it
Designed to support institutions as data controllers: data minimisation, purpose limitation, security, role-based access and support for data subject rights. Data processing terms are agreed with each institution.
EU AI Act (Regulation (EU) 2024/1689)
What it covers
Risk-based rules for AI. AI systems used in education to evaluate learning outcomes are listed among high-risk uses (Annex III).
How GenRate approaches it
Designed with reference to the requirements for high-risk systems — risk management, data governance, documentation, record-keeping, transparency, human oversight, accuracy and robustness — and to support institutions' own obligations as deployers.
ISO/IEC 42001:2023
What it covers
The international standard for an AI management system: how an organisation governs the AI it builds and uses.
How GenRate approaches it
Our AI governance is designed with reference to ISO/IEC 42001.
NIST AI Risk Management Framework (AI RMF 1.0)
What it covers
A framework for identifying and managing AI risk through four functions: Govern, Map, Measure and Manage.
How GenRate approaches it
Used as a reference for how we identify, assess and manage AI risks across the product lifecycle.
UK AI regulatory principles
What it covers
The UK government's cross-sector principles: safety, security and robustness; transparency and explainability; fairness; accountability and governance; contestability and redress.
How GenRate approaches it
Reflected directly in the principles and oversight controls on this page.
Certifications and independent assurance: none listed at present. This section will be updated when any are obtained.
Questions from governance, data protection or procurement teams?
We’re happy to talk through how GenRate would fit your institution’s policies and risk processes.