How ReportRocket Uses AI With Student Data

    Security & Privacy
    Updated Oct 10, 2026
    3 min read

    Understand exactly what student information ReportRocket sends to the AI, how that data is processed, and why it is never used to train AI models.

    What ReportRocket Sends to the AI

    When you generate or check a comment, ReportRocket sends only what that comment needs:

    • The student's pronouns and year level
    • The curriculum criteria and performance levels you chose
    • Any notes you added about the student
    • Your style guide and example comments
    • The comment itself, when you check, reword or shorten it, or ask for a fix to a reviewer's note

    ReportRocket never asks for addresses, medical records, photos or other sensitive details, so none of that is sent unless it's typed into a note.

    Student Names Are Replaced First

    Before anything is sent, ReportRocket swaps the student's name, the names of other students at your school (or in your own classes, for a personal account) and your school's name for made-up stand-in names. The AI writes about the stand-in, and the real names are put back before the comment reaches you.

    Names are matched against your class lists, so a nickname or a family member's name that isn't on a list won't be replaced. Using the names from your class list in your notes keeps everything covered.

    How Google Handles the Request

    Comment writing and checking use Google Gemini through Google's paid API. Under Google's terms:

    • Google does not use what we send, or what it returns, to train its models or improve its products
    • Google keeps a copy for a limited period, solely to detect misuse and meet legal requirements
    • It may process or briefly store that copy in any country where it has facilities, including outside Australia

    If Gemini is busy, the request goes to Google Cloud's Vertex AI instead, with the same name replacement.

    Your Data Is Not Used to Train AI Models

    Data submitted through the Google AI API is not used to train or improve Google's models. Student information is used only to generate the comment you asked for, and nothing else.

    Where Your Data Lives

    The comments you save, your classes, and your students are all stored in a database hosted in Australia (AWS Sydney). The only time student information leaves Australia is in the AI requests described above, with names replaced first. See Data security and privacy for the full picture on hosting, encryption, and access control.

    You Stay in Control

    ReportRocket generates a draft. You review, edit, and approve every comment before it reaches a report. The teacher always has the final say on what is written about a student.

    Next Steps

    Tags:
    AI
    privacy
    student data
    security
    Gemini

    Was this article helpful?