Trust centre

About this page

Last updated: 10 October 2026.

This page describes how the Oxonia platform is designed to work. It is not a certification or an audit report. Our contractual commitments are in each university's order form, the data processing agreement and the service level agreement.

Oxonia Academy serves universities in the UK, the EU, Nigeria, Ghana, Kenya, South Africa, the Gulf, Malaysia and Turkey. Each has its own laws and its own regulator. This trust centre is the starting point for IT, data protection, legal and procurement teams who need to understand how Oxonia works before they sign.

Three promises built into the product

• People approve official records. Anything that becomes an official record, such as marks, minutes or policies, waits for a named person to approve it. See How AI drafts are approved.
• AI answers cite their sources. Summaries cite the minute, Library answers cite the page, and the Compass weekly brief has a source for every line. See Citations and sources.
• One sign-in, controlled by the university. The Oxonia Academy ID uses the university's own Microsoft, Google or SAML and Shibboleth sign-in.

Security

How the platform is designed to keep data safe:

• Security overview
• Encryption
• Access controls and 2FA
• Audit logs
• Backups and recovery
• Penetration testing
• Vulnerability disclosure

Privacy and data protection

• Data protection
• Data residency
• Sub-processors
• Privacy notice
• Student privacy notice
• Regional privacy addenda
• Data requests
• Data processing agreement

Responsible AI

• AI principles
• Responsible AI policy
• How AI drafts are approved
• Citations and sources
• AI fair use
• Accessibility statement

Contracts and service

Our terms of service, service level agreement and support policy set out what we commit to. Current service health is on the service status page.

Requesting documents

Procurement teams often need a security questionnaire answered or a copy of our policies. Ask for these when you book a demo. Security questions go to security@oxonia.ai and data protection questions to privacy@oxonia.ai. Any certifications or independent audits will be listed here only once they are achieved. None is claimed on this page.

If something on this page is unclear, or you need an answer in a particular format for a tender, tell us. We would rather give a plain, accurate answer marked as not yet confirmed than a confident answer that turns out to be wrong.