Security

This page explains how OneAI protects accounts and school data. It only describes practices that are already built into the system. Anything still being checked is left out and is not a commitment.

Overview

Where data is stored: data is stored on cloud servers in mainland China.
Access control: access depends on each account's role, and class, grading and learning data are kept separate between schools.
AI and human review: problems that AI extracts from a paper enter the problem bank only after a teacher reviews them.
Backup and recovery: the database gets a full backup every day with continuous log archiving, and backups are kept for 14 days.

Infrastructure

Data is stored on cloud servers in mainland China, with another copy kept outside the cluster in the same region.

The whole site is served over HTTPS; requests over HTTP are redirected to HTTPS.

The database gets a full backup every day with continuous log archiving, and backups are kept for 14 days.

Account security

Passwords are never stored in plain text. OneAI stores only a salted scrypt hash.
Sign-in sessions can be revoked. When you sign out, the session on that device stops working.
After a successful password reset, every earlier session for that account stops working.

School data separation and permissions

Class, grading and learning data are separated by school. Lookups check who owns the record and also add the school as a condition, so data from other schools is not returned.
Background jobs also check that the data they process belongs to the same school as its parent record.
When a school is deactivated, its accounts can no longer sign in.
Access depends on role. Students, teachers, school admins and platform admins can each do different things. School admins manage only their own school, and school admin and platform admin permissions do not carry over to each other.

Operator access

Every change a platform admin makes in the admin console is committed together with its audit record. If a change fails, neither the change nor an audit record is kept.
When someone's admin access is removed, they lose it from their next request.
Audit records hold only the action, the affected item and a summary. They never hold invite codes in plain text, tokens or full request contents.

AI processing

Problems that AI extracts from a paper enter the problem bank only after a teacher checks them against the original image and publishes them.

Deletion and retention

Deleting cannot be undone by users, and there is no recycle bin. For anything you may need later, use Archive instead, which you can restore.
After deletion, the system still keeps a deletion marker, the content, related records and audit records. It does not physically erase them.