Document status: Assurance summaryDOCX
Appropriate Policy Document
Supplier assurance for special-category and criminal-offence data processing controls.
- Version
- 1.1
- Reviewed
Procurement & due diligence
A due-diligence library your reviewers can actually use
Start with one versioned pack, then trace any question to the individual policy, certificate or review template behind it.
Every entry shows its status, version and review date. The MSA and DPA are procurement review templates, not signature copies or executed agreements.
They contain no customer-specific names, selections, instructions or order details.
Start with one controlled pack
Share the same versioned set of supplier evidence with every reviewer, alongside a checksum manifest.
Trace the individual source
Open the exact policy, certificate or template behind a question without searching through a generic document list.
Complete the school review
Keep supplier-wide evidence separate from school-specific decisions, selections and executed agreements.
Complete review pack
Download the complete due-diligence pack
Version 2026.08.1, reviewed . The ZIP contains the same 16 source documents listed below and a manifest with file versions and SHA-256 checksums. It contains no customer-specific order details.
Use the pack for supplier review. School-specific selections, instructions, order details and signed terms belong in your school’s own approval and contracting process.
- Contents
- 16 published source documents
- Review areas
- 5 due-diligence subjects
- Traceability
- Versions and SHA-256 checksums
- Scope
- No customer-specific order details
Individual source documents
Trace every review question to the document behind it
Review by subject, open a browser-friendly PDF, or download the source document. Status, version and review date remain visible so a reviewer can tell exactly what they are looking at.
Browser PDF previews are convenience copies. Where a source DOCX is supplied, that downloaded source remains the controlling document.
07 documents
Data protection
Controller and processor responsibilities, privacy, retention and sub-processor transparency.
- Document status: Current policyDOCX
Cookie, Client Storage and Telemetry Notice
Current use of cookies, browser storage and cookie-free performance telemetry.
- Version
- 1.1
- Reviewed
- Document status: Review templateDOCX
Data Processing Agreement - Review Template
Shareable controller-processor review terms; a clean execution copy is prepared after review.
- Version
- 1.0
- Reviewed
- Document status: Supplier templateDOCX
DPIA Supplier Information and School Template
Supplier facts and a controller-owned template for completing a school or trust DPIA.
- Version
- 1.1
- Reviewed
- Document status: Current policyDOCX
Data Retention and Deletion Schedule
Current retention, export, deletion and backup-handling schedule by data class.
- Version
- 1.2
- Reviewed
- Document status: Current policyDOCX
Privacy Notice
How Student Radar handles personal data across its website and services.
- Version
- 1.4
- Reviewed
- Document status: Current registerDOCX
Sub-Processor List
Current supplier register for public and school-enabled processing.
- Version
- 1.6
- Reviewed
04 documents
Security & resilience
Security controls, incident response, continuity and certification.
- Document status: Assurance summaryDOCX
Business Continuity and Resilience Summary
Buyer-facing continuity, backup, recovery and resilience arrangements.
- Version
- 2.0
- Reviewed
- Document status: CertificatePDF
Cyber Essentials
Current Cyber Essentials certificate for security due diligence.
- Version
- Profile 3.2 (Willow)
- Reviewed
- Document status: Assurance summaryDOCX
Incident Response and Breach Notification Summary
Buyer-facing incident handling, escalation and notification arrangements.
- Version
- 2.0
- Reviewed
- Document status: Assurance summaryDOCX
Information Security and Controls Summary
Buyer-facing overview of organisational and technical security controls.
- Version
- 2.0
- Reviewed
02 documents
Contracts & service
Shareable contract-review templates and standards for authorised platform users.
- Document status: Current policyDOCX
Acceptable Use Policy
Expected use standards for authorised platform users and administrators.
- Version
- 1.1
- Reviewed
- Document status: Review templateDOCX
Master Services Agreement - Review Template
Shareable service-terms review template; customer-specific terms belong in an Order Form.
- Version
- 1.0
- Reviewed
02 documents
Accessibility & safeguarding
Accessibility position and safeguarding responsibilities for schools.
- Document status: Assurance summaryDOCX
Accessibility Statement
Current accessibility position, known limitations and contact route.
- Version
- 2.0
- Reviewed
- Document status: Assurance summaryDOCX
Safeguarding Assurance Note
Supplier assurance and school responsibilities for safeguarding workflows.
- Version
- 2.0
- Reviewed
01 document
AI governance
Technical transparency for public tools and school-enabled AI processing.
- Document status: Assurance summaryDOCX
AI Processing and Transfer Overview
Verified public-tool processing, anonymous Sensory inputs and signed PDF boundaries.
- Version
- 1.4
- Reviewed
School-specific review
Continue your due-diligence review with a real person
Request access to the Demo School, or bring your data protection, security, service-boundary and package questions to a 30-minute walkthrough.