Appropriate Policy Document
Document status: Assurance summarySupplier assurance for special-category and criminal-offence data processing controls.
- Version
- 1.1
- Reviewed
- 11 Jul 2026
Download the documents commonly requested during school procurement, data protection, and security review.
Every entry shows its status, version and review date. The MSA and DPA are procurement review templates, not signature copies or executed agreements. They contain no customer-specific names, selections, instructions or order details.
Browser PDF previews are convenience copies. Where a source DOCX is supplied, that downloaded source remains the controlling document.
For a plain-English overview of how we protect your data, see our security & data protection page.
Version 2026.07.4, reviewed 11 Jul 2026. The ZIP contains the same 16 source documents listed below and a manifest with file versions and SHA-256 checksums. It contains no customer-specific order details.
Controller and processor responsibilities, privacy, retention and sub-processor transparency.
Supplier assurance for special-category and criminal-offence data processing controls.
Current use of cookies, browser storage and cookie-free performance telemetry.
Shareable controller-processor review terms; a clean execution copy is prepared after review.
Supplier facts and a controller-owned template for completing a school or trust DPIA.
Current retention, export, deletion and backup-handling schedule by data class.
How Student Radar handles personal data across its website and services.
Current supplier register for public and school-enabled processing.
Security controls, incident response, continuity and certification.
Buyer-facing continuity, backup, recovery and resilience arrangements.
Current Cyber Essentials certificate for security due diligence.
Buyer-facing incident handling, escalation and notification arrangements.
Buyer-facing overview of organisational and technical security controls.
Shareable contract-review templates and standards for authorised platform users.
Expected use standards for authorised platform users and administrators.
Shareable service-terms review template; customer-specific terms belong in an Order Form.
Accessibility position and safeguarding responsibilities for schools.
Current accessibility position, known limitations and contact route.
Supplier assurance and school responsibilities for safeguarding workflows.
Technical transparency for public tools and school-enabled AI processing.
Verified public-tool processing, anonymous Sensory inputs and signed PDF boundaries.
Explore the demo school in your own time, or request a walkthrough to discuss the documents, service boundaries and packages with us.