Document status: Supplier templateDOCX
School DPIA Support Pack
Supplier information and optional worksheets for the school or trust’s own DPIA; no signature or return required.
- Version
- 1.4
- Document date
Procurement & due diligence
A due-diligence library your reviewers can actually use
Start with one versioned pack, then trace any question to the individual policy, certificate or agreement template behind it.
Every entry shows its status, version and document date. The MSA and DPA are agreement templates with signature fields. Your customer-specific Order Form is supplied separately.
The Order Form, MSA and DPA form your contract. The School DPIA provides information and optional worksheets for your own assessment; it does not need to be signed or returned to Student Radar.
Start with one controlled pack
Share the same versioned set of supplier evidence with every reviewer, alongside a checksum manifest.
Trace the individual source
Open the exact policy, certificate or template behind a question without searching through a generic document list.
Complete the school review
Keep supplier-wide evidence separate from school-specific decisions, selections and executed agreements.
Complete review pack
Download the complete due-diligence pack
Version 2026.09.1, updated . The ZIP contains the same 17 source documents listed below and a manifest with file versions and SHA-256 checksums. It contains no customer-specific order details.
The customer document index covers the supplied contracts, policies and certificate. The Acceptable Use Policy and Cookie, Client Storage and Telemetry Notice are included as additional documents.
- Contents
- 17 published source documents
- Review areas
- 5 due-diligence subjects
- Traceability
- Versions and SHA-256 checksums
- Scope
- No customer-specific order details
Individual source documents
Trace every review question to the document behind it
Review by subject, open a browser-friendly PDF, or download the source document. Status, version and document date remain visible so a reviewer can tell exactly what they are looking at.
Browser PDF previews are convenience copies. Where a source DOCX is supplied, that downloaded source remains the controlling document.
07 documents
Data protection
Controller and processor responsibilities, privacy, retention and sub-processor transparency.
- Document status: Agreement templateDOCX
Data Processing Agreement
Controller and processor terms, processing instructions, safeguards and signature fields.
- Version
- 3.5
- Document date
- Document status: Assurance summaryDOCX
Appropriate Policy Document
Supplier safeguards for special-category and criminal-offence information; supports the school’s own assessment.
- Version
- 3.3
- Document date
- Document status: Current policyDOCX
Data Retention Policy
School-record retention, return and deletion requirements, including final backup expiry within 60 days of termination.
- Version
- 3.3
- Document date
- Document status: Current policyDOCX
Privacy Policy
How Student Radar handles personal information, individual rights, providers and retention.
- Version
- 3.3
- Document date
- Document status: Current registerDOCX
Sub-Processor List
Providers, purposes, information processed, locations and safeguards under the DPA.
- Version
- 3.3
- Document date
- Document status: Current policyDOCX
Cookie, Client Storage and Telemetry Notice
Current use of cookies, browser storage and cookie-free performance telemetry.
- Version
- 1.1
- Document date
04 documents
Security & resilience
Security controls, incident response, continuity and certification.
- Document status: CertificatePDF
Cyber Essentials
Current Cyber Essentials certificate for security due diligence.
- Version
- Profile 3.2 (Willow)
- Document date
- Document status: Assurance summaryDOCX
Business Continuity Summary
Service continuity, backup cycles, recovery arrangements and school responsibilities.
- Version
- 3.3
- Document date
- Document status: Current policyDOCX
Incident Response Policy
Incident reporting, escalation and breach notification requirements.
- Version
- 3.3
- Document date
- Document status: Current policyDOCX
Information Security Policy
Security responsibilities and requirements for access, encryption, monitoring and secure development.
- Version
- 3.3
- Document date
03 documents
Contracts & service
Customer contract templates, pack guidance and standards for authorised platform users.
- Document status: Document indexPDF
Customer Document Index
Guide to the customer pack, separate Order Form and documents requiring signatures.
- Version
- 1.0
- Document date
- Document status: Agreement templateDOCX
Master Service Agreement
Service terms, availability, fees and liability, used with the customer-specific Order Form.
- Version
- 1.4
- Document date
- Document status: Current policyDOCX
Acceptable Use Policy
Expected use standards for authorised platform users and administrators.
- Version
- 1.1
- Document date
02 documents
Accessibility & safeguarding
Accessibility position and safeguarding responsibilities for schools.
- Document status: Assurance summaryDOCX
Accessibility Statement
Current accessibility position, known limitations and contact route.
- Version
- 3.3
- Document date
- Document status: Assurance summaryDOCX
Safeguarding Assurance Note
Supplier assurance and school responsibilities for safeguarding workflows.
- Version
- 3.3
- Document date
01 document
AI governance
AI purposes, human review and authorised provider processing.
- Document status: Assurance summaryDOCX
AI Transfer Overview
AI purposes, human review, provider processing, retention requirements and international safeguards.
- Version
- 3.3
- Document date
School-specific review
Continue your due-diligence review with a real person
Request access to the Demo School, or bring your data protection, security, service-boundary and package questions to a 30-minute walkthrough.