Turnitin icon

Turnitin

US AI detection and academic integrity platform for education institutions

by TurnitinUSUnited States🌐EU (AWS Dublin) or US — institution choice
TrustKit Score68%Strong

About Turnitin

Turnitin was founded in Oakland, California in 1998 and has become the de facto standard for plagiarism detection in higher education, used by over 16,000 institutions and 62 million students globally. Following the rise of AI-generated content, Turnitin launched its AI Writing Detection capability in 2023, which analyses submitted text to identify the probability that portions were generated by large language models including ChatGPT, GPT-4, Gemini, and Claude. The AI detection feature reports a percentage probability that a document contains AI-generated content, along with highlighted text segments. Turnitin has been transparent about the limitations of its detector — the company acknowledges a false positive rate and recommends that results be used as one data point in an academic integrity review, not as conclusive proof. This nuanced positioning is important for European institutions that need to justify academic decisions under due process principles. For European higher education institutions, Turnitin's GDPR compliance posture is a significant procurement consideration. Student data — including submitted essays and personal identifiers — is processed by Turnitin, a US company subject to the CLOUD Act. Turnitin provides GDPR-compliant DPAs with SCCs, and offers data residency options that include EU hosting (AWS Dublin) for institutions that require it. However, the EU hosting option requires Enterprise-level engagement and explicit configuration. Turnitin holds ISO 27001 certification and SOC 2 Type II, which is important for institutional procurement processes. It is also Cyber Essentials Plus certified (UK), relevant for UK universities post-Brexit. The platform integrates with all major Learning Management Systems (LMS) including Moodle, Canvas, Blackboard, and Microsoft Teams Education. Pricing is institution-wide, based on student FTE counts, and is negotiated directly with Turnitin sales. Typical annual contract values range from £5,000–£50,000 for mid-size to large universities. For European academic institutions, Turnitin remains the most recognised and legally defensible option for AI detection, but procurement teams should ensure the EU data residency option is contractually specified and confirmed for all student data processing.

Sentiment Score?
4.4/ 5

TrustKit Score Breakdown

?68% Strong
Data Residency
Where is your data stored and processed?
EU hosting available (AWS Dublin) but requires explicit Enterprise-level configuration; US default otherwise
3/5
Legal Jurisdiction
Which laws govern the company and your data?
US Delaware corporation; CLOUD Act applies to student data; DPA with SCCs available for EU institutions
2/5
Data Retention & Training
Is your data used for model training?
Submissions stored for similarity comparison (core function); not used to train AI models; configurable retention
4/5
Certifications
ISO 27001, SOC 2, Cyber Essentials, etc.
ISO 27001, SOC 2 Type II, and Cyber Essentials Plus — strong for an EdTech platform
5/5
Regulatory Fit
Suitability for regulated industries and professional services
GDPR DPA available; EU hosting option exists; institutions must explicitly configure EU residency for student data
3/5

Pricing

Custom
InstitutionContact Sales
Full pricing details →

Quick Facts

Starting PriceContact SalesData HostingEU (AWS Dublin) or US — institution choiceTrains on Your DataNot used for trainingFounded1998Employees201-1000

Frequently Asked Questions

Is Turnitin GDPR compliant?

Turnitin has a TrustKit compliance score of 68% (Strong). Data Residency: EU hosting available (AWS Dublin) but requires explicit Enterprise-level configuration; US default otherwise. Legal Jurisdiction: US Delaware corporation; CLOUD Act applies to student data; DPA with SCCs available for EU institutions.

Where does Turnitin store data?

Turnitin hosts data in: EU (AWS Dublin) or US — institution choice. EU hosting available (AWS Dublin) but requires explicit Enterprise-level configuration; US default otherwise

Does Turnitin train on user data?

Turnitin: Not used for training. Submissions stored for similarity comparison (core function); not used to train AI models; configurable retention

What certifications does Turnitin hold?

Turnitin holds: ISO 27001, SOC 2 Type II, Cyber Essentials Plus, GDPR. ISO 27001, SOC 2 Type II, and Cyber Essentials Plus — strong for an EdTech platform

Compare Turnitin With

Similar Tools