Responsible AI at Academyship

#01Purpose, scope and authoritative documents

This statement explains, at a public level, how ACADEMYSHIP PTY LTD (ACN 698 283 448, ABN 89 698 283 448) governs the AI-assisted features ("AI Features") in its platform. It is informational and does not override the Terms of Service, Privacy Policy or Data Processing Addendum, which remain the authoritative documents. AI Features are available from Academyship’s launch on 12 September 2026.

#02Our responsible AI commitments

Academyship's AI Features are built around the following commitments:

• we do not use Customer Data or Student Data to train general-purpose AI models;
• we do not sell Customer Data or use it for advertising;
• AI Features operate within an Institution's tenant and respect its role and permission boundaries;
• AI is decision support with human oversight, not a replacement for professional judgement;
• each Institution can enable, disable or restrict AI Features and how they are used;
• AI processing uses Amazon Bedrock in Sydney, Australia (ap-southeast-2), with cross-region inference disabled; and
• any customer-specific model customisation, if offered, is separately opt-in.

#03AI feature inventory

AI Features are available from Academyship’s launch. They provide AI-assisted functionality within an Institution’s tenant and are subject to that Institution’s configuration, role permissions and the safeguards in this statement. “Authorised staff roles” below means the Institution administrators, academic, operational or other staff roles to which the Institution grants the relevant feature and underlying-data permissions; Academyship does not publish a fixed cross-Institution role list.

Razi voice typing is separate from AI Features

Razi is a voice-typing input method, not an Amazon Bedrock feature and not part of Academyship’s generative-AI feature inventory. It uses speech-recognition capabilities supplied by the User’s browser, operating system or device to convert spoken words into text for supported Academyship fields and editors. Academyship does not receive or store raw audio through Razi. Academyship receives and handles only the resulting text after it is inserted into an Academyship field, in the same way as text manually entered into that field.

The browser or device provider may process speech under its own privacy terms and technical configuration. Availability and accuracy depend on the User’s browser, device, language, permissions and network conditions. Users must review the transcription before saving or relying on it. Razi does not make decisions, analyse student behaviour or generate autonomous actions. An Institution can control whether Razi is available to Users where the relevant configuration exists.

Customer Data and Student Data are not used to train general-purpose models. We do not expose prompts, retrieval internals, attack strings, model configuration or security-sensitive architecture. The inventory records the permitted roles, purpose, authorised data sources, output, action capability, Institution control, provider, model family, processing region and logging position for the verified production features.

#04How Academyship uses information for AI

AI Features may use the requesting user's authorised information within that Institution's tenant, together with the user's request, to produce an output. We apply data minimisation so that only information relevant to the task is used. Users must not include unnecessary Sensitive Information in prompts. Producing an output for the Service is different from training a model: Customer Data and Student Data are not used to train general-purpose models. AI usage, security and audit events follow the 30-day infrastructure and security-log retention position; saved outputs remain subject to the retention rules for the underlying Customer record.

#05Providers, models and processing locations

Amazon Bedrock is Academyship's AI processing service. Amazon Web Services Australia Pty Ltd (ABN 63 605 345 891) is Academyship’s AWS contracting entity under the AWS Customer Agreement. Processing occurs in Sydney, Australia (ap-southeast-2), and cross-region inference is disabled. The Subprocessor Register is the current canonical register for Amazon Bedrock and Academyship’s other AWS services. A material change to a provider, model family, purpose, data use or action capability requires approval under Academyship's AI governance process.

Academyship hosts its core production platform and Customer Data in Sydney, Australia (ap-southeast-2). Limited processing outside Australia may occur through disclosed telecommunications delivery, Stripe-hosted payment services, Customer-selected Integrations or authorised access, subject to applicable privacy, contractual and security safeguards.

#06Tenant isolation and permissions

AI Features operate within an Institution's tenant and apply the requesting User's permissions. Each Institution can disable AI Features or restrict their use through administrative configuration and role permissions.

#07Human oversight and significant decisions

AI Features are decision support. Academyship does not use them as the sole basis for a decision that has a legal or similarly significant effect on a person — for example, admission, grading, discipline, employment, finance, wellbeing or safeguarding decisions. Those decisions are made by authorised people at the Institution, who remain accountable for them. AI outputs should be reviewed before they are relied on or acted upon.

#08Prohibited and restricted uses

Academyship does not design its AI Features to, and does not permit their use to:

• perform biometric identification or emotion inference;
• make automated decisions that unlawfully discriminate against a person;
• conduct covert surveillance of students or staff;
• take autonomous disciplinary action;
• build unauthorised profiles or infer sensitive information about individuals;
• exploit or endanger children, or generate harmful, illegal or abusive content;
• request or expose credentials or secrets; or
• access another tenant's data or evade platform permissions.

#09Institution controls and configuration

Academyship owns governance of the platform's AI service, including approval and incident containment. AI Features include Institution controls and role-permission implementation appropriate to the feature. Institutions remain responsible for role assignment, permitted use, staff training, user notices and review of outputs. Customer-specific customisation is separately opt-in.

#10AI-generated actions

There is a difference between an AI Feature that produces an answer or proposed text for a person to use, and one that could take an action with an effect (such as sending a message). Academyship does not enable AI to take significant actions autonomously without human approval. Action-capable features are subject to feature-specific review.

#11Transparency to users

Where AI is used, Academyship aims to make that clear to the people using the feature, to indicate the limitations of AI output, and to seek confirmation before an action is taken. Users can challenge an output through the relevant Institution, which can correct the underlying record and seek support where needed. Institutions are responsible for any additional notices they need to give their users, and for communicating with children in an age-appropriate way where relevant (see the Student Privacy Guide).

#12Accuracy, quality and accessibility

AI outputs can be wrong or incomplete, and should be checked before being relied on. Where a result should be exact (for example, a calculation), Academyship uses deterministic methods rather than generative AI. We work to make AI Features accessible, consistent with our Accessibility Statement. We do not claim that our AI is unbiased, always accurate, fully explainable or free of error.

#13Risk assessment, testing and release governance

Academyship classifies AI changes by their purpose, data sensitivity, user population, action capability and potential effect on people. A feature requiring privacy, security or safety assessment is not approved for release until the applicable assessment and governance approval are complete. Material provider, model, purpose, data-use or action-capability changes require the same approval. We do not publish exploit methods, attack strings or the internal detail of assessments.

#14Logging, monitoring and retention

Infrastructure and security logs, including relevant AI usage, security and audit events, are retained for 30 days. An output that an authorised User saves into a Customer record is retained with that record under the Institution’s configuration, applicable law and the Terms. We do not publish prompts, detailed inference content, model configuration or a model's internal “reasoning”.

#15AI incidents, harmful outputs and reporting

If an AI Feature produces a harmful output or behaves unexpectedly, you can report it through support at support@academyship.com.au, or through privacy@academyship.com.au or safety@academyship.com.au where privacy or safety is involved. We can contain an issue, disable a feature where necessary, investigate, and escalate where the law requires. A suspected security vulnerability should be reported through our security disclosure process.

#16Children, sensitive data and high-risk modules

Where children and young people are involved, Academyship applies stricter defaults and role restrictions, and Institutions remain responsible for their use of AI with students. Academyship does not use AI for wellbeing, health or behavioural scoring of children. Our approach to children is described further in the Child Safety Statement.

#17Third-party and customer-selected AI integrations

This statement covers AI Features that Academyship provides. It does not cover an AI tool that an Institution chooses to connect as a Customer-selected Integration; those are selected and controlled by the Institution, which is responsible for the resulting data flows and for approving them. See the Subprocessor Register and DPA for how appointed providers and Integrations are distinguished.

#18Questions, complaints, changes and related documents

For questions about this statement, contact legal@academyship.com.au; for privacy matters, privacy@academyship.com.au; for security matters, security@academyship.com.au. We review this statement at least annually and may also review it following a material service change or a relevant legal or regulatory development. A change to a model, provider, feature, action capability or data use is treated as a material service change for this purpose.

Privacy Policy Terms of Service DPA Subprocessors Child Safety Security Disclosure