AI tool summary for DPOs and governors
GPTZero
GPTZero Inc. · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Amber · Use with caution
- Training depends on plan or settings
- Doesn’t say if it is a processor or controller
- Doesn’t say where data is stored
Pupils: Red · Not recommended for school data
- Supplier says it is not for pupils
| Supplier | GPTZero Inc. |
|---|---|
| Category | AI detector |
| Pupil-facing | no - typically teacher-run |
| Processor or controller | not stated |
| Where data is stored | not stated |
| Trains AI models on inputs | depends - teacher/institution submissions never used for training; free users' anonymised submissions may be used to improve detection |
| How long inputs are kept | dashboard scans kept as history until deleted; API text discarded unless storage opted in |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | not stated |
| Minimum age | not stated |
| Key safety note | detector scores are probabilistic; avoid pasting identifiable pupil work on free accounts |
| Main use | AI writing detection |
Better-rated alternatives for the same use: Winston AI (Amber), ZeroGPT (Amber)
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://support.gptzero.me/articles/9816574530-does-gptzero-train-on-my-submitted-text · https://support.gptzero.me/articles/8705593161-what-data-does-gptzero-collect-when-i-use-it · https://gptzero.me/privacy-policy.html
Full entry: aiprefect.co.uk/tools/gptzero. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.