VelociGrader Logo

VELOCIGRADER AI

Knowledge Base

Knowledge Base / Privacy and Security / Secure AI Provider Configuration

Privacy and Security

Secure AI Provider Configuration

Configuring your AI provider correctly is the single most impactful step for keeping school grading workflows safe and auditable.

Key scoping

Create a dedicated API key specifically for VelociGrader school grading. Do not reuse a key from another project or a personal account used for non-school purposes. A scoped key gives you three practical benefits:

  • Isolation: Revoking the key stops all school grading access without disrupting other workflows.
  • Auditability: Usage logs at the provider are specific to grading activity, not mixed with personal use.
  • Billing clarity: School grading costs are clearly separated from personal or side-project API usage.

See also: How to Add Your OpenRouter API Key.

Account separation for school vs. personal use

If you grade both school assignments and personal projects with AI, consider maintaining two separate provider accounts — one for personal use, one for school workflows. This ensures that any data opt-out settings, usage limits, or access controls you configure for school use are fully isolated and not accidentally overridden by personal account changes.

Provider selection checklist

Before adding a provider to your AI Engine panel for school use, verify:

  • The provider has a published privacy policy covering API usage (not just their consumer products).
  • A data training opt-out is available and enabled on your account.
  • The provider can supply a Data Processing Agreement (DPA) if your district requires one.
  • Data residency is in a region acceptable to your school or district IT policy.

Revoking access

If you suspect a key has been compromised, or you are leaving a school position:

  1. Delete or rotate the API key in your provider's dashboard. VelociGrader's stored key reference becomes inactive immediately.
  2. Generate a new key and update the AI Engine panel in VelociGrader if you want to continue grading.
  3. Notify your department or IT team if the key was used for shared school infrastructure.

FAQ

Should teachers use a separate API key for school grading?

Yes. Create a dedicated key for school workflows. This isolates usage, allows revocation without affecting personal projects, and makes billing and auditing straightforward.

What AI providers are safe to use for classroom grading?

Choose providers that offer a data training opt-out, have a published API privacy policy, and provide DPAs for educational institutions when required by your district.

How do I revoke AI provider access from VelociGrader?

Delete or rotate the key from your provider's dashboard. VelociGrader's stored reference becomes inactive immediately when the key is revoked at the provider.

Related Guides