Six guarantees, in writing
Never used to train a model
Rubrica trains nothing on your data. The models we call (Mistral AI) process your prompts and documents under API terms that exclude training on customer content. We never sell data, to anyone.
Isolated per institution
Each institution is its own tenant. Row-level security in the database means a query from one institution cannot return another's rows, whatever the application does. The isolation is enforced by Postgres, not by the screen.
Stays in the EU
Database, files and application run on our own servers in Frankfurt, Germany. AI inference runs in the EU at Mistral. Nothing is replicated to a non-EU region.
Structural anonymity for peer ratings
Individual peer and jury votes are stored in a table no client can read. Teachers, students and the AI only ever see aggregates. Privacy enforced in the schema, not just the interface.
Your data leaves with you
Export of a course, a teacher or a whole institution, and deletion on request, under the GDPR rights to portability and erasure. We sign a Data Processing Agreement with your institution.
What we log, and what we do not
An audit log of actions (who created, published, graded) for accountability. AI calls are logged as model, tokens and duration, never as their content.
Data residency, plan by plan
Today everything lives in Frankfurt. Institutions that need their own country, their own domain or their own servers get exactly that.
| Plan | Where your data lives | Status |
|---|---|---|
| Private beta and Pro | Shared European infrastructure in Frankfurt, Germany, isolated per institution by the database. | Available now |
| Institution | A dedicated instance (database, files, application) in the EU country you choose, provisioned under contract, with your own domain and your own backups. | Provisioned on contract |
| Institution, on premises | The same stack deployed on servers you operate. Rubrica is self-hosted by design (Docker, Postgres), so it moves. | On request |
Hosting: Germany AI: Mistral, EU Daily backups, 14-day retention No US cloud
What your data-protection office will ask
- Where is our data, physically?
- In Frankfurt, Germany, on servers we operate ourselves (Hostinger datacenter). No AWS, Google Cloud, Azure or Vercel.
- Who at Rubrica can see our course material?
- Operations staff with database access, under confidentiality, and only for support or incident work. No one reads your material to improve the product.
- Do the AI models learn from our documents?
- No. Neither ours nor Mistral's. Mistral's API terms exclude training on customer data; by default they keep API traffic for 30 days for abuse monitoring, and a zero-retention arrangement is available on request.
- Does anything leave the EU?
- No. Hosting in Germany, AI inference in the EU at Mistral (France). Payment for student subscriptions goes through Stripe, which receives billing data only, never uploads or notes.
- Can we leave?
- Yes. On request we export everything in standard formats (CSV, JSON, your original files), and the whole stack is self-hostable.
- Can we choose the country?
- On the Institution plan, yes: a dedicated instance in the EU country you choose, under contract.
Sub-processors, retention periods and the legal basis for each processing activity are in the Privacy Policy.
AI for teaching your DPO can sign off.
Request the DPA, ask for a dedicated instance in your country, or start with the private beta.