Compliance

Regulatory peace of mind, built into Loumo.

UK GDPR, EU AI Act, Ofqual, OfS — Loumo absorbs the regulatory complexity so your teams can focus on what matters: assessment quality and student outcomes.

Book a demo Our compliance guides

UK GDPR EU AI Act Ofqual OfS

Regulatory frameworks

Four frameworks. One platform.

UK GDPR

Data hosted in the UK or EU, DPA ready to sign, pseudonymisation before AI processing, student rights managed natively.

Read our guide

EU AI Act

High-risk AI system — fully documented and compliant. Native human oversight: every grade is validated by a qualified marker. No automated decisions.

Read our guide

Ofqual

Continuous generation of assessment evidence, permanent audit trail, learner adjustments (e.g. extra time) automatically logged and traceable.

Read our guide

OfS

Assessment records structured by learning outcome, complete traceability for your registration and quality assurance obligations with the Office for Students.

Read our guide

AI suggests. The marker decides. Always.

Every Loumo grade is the result of a human judgement informed by AI. This is an architectural guarantee, written into every contract.

Division of responsibilities

Loumo absorbs 80% of the regulatory burden.

80%of the burden carried by Loumo

Across the key regulations, the vast majority of technical and documentary obligations fall on the provider. Loumo has internalised this work so you get a fully compliant platform from day one.

Loumo handlesTechnical & documentary obligations

UK / EU data hosting — no replication outside the UK or EEA
UK GDPR-compliant DPA (Article 28), ready to sign and negotiable
Data Protection Impact Assessment (DPIA) pre-completed
Pseudonymisation of scripts before AI processing
Native human oversight on every AI output
Automatic logging of all actions — minimum 6-month retention
EU AI Act technical documentation — registered on the EU database
Fundamental Rights Impact Assessment (FRIA) template & deployer support
Ofqual assessment evidence generated continuously
OfS audit trail — all sessions archived and exportable

You stay in controlAcademic decisions & governance

The final grading decision — always under human control
Informing your students (templates provided by Loumo)
Your deployer FRIA — with our template and guidance
Appointing your qualified markers
Your internal archiving policy
Configuring your mark schemes and learning outcome frameworks

Technical guarantees

Infrastructure built for trust.

UK / EU hosting

Google Cloud europe-west1, no replication outside the UK or EEA

Encryption in transit

TLS 1.2+ for all communications

Encryption at rest

AES-256 for all stored data

Pseudonymisation

Identifying information removed automatically before AI processing

RBAC access control

Each user only accesses their own scope

SSO available

Compatible with SAML 2.0, OAuth 2.0 and CAS

Exportable logs

All actions traced and audit-ready

Ready to deploy Loumo with confidence?

Book a demo