a black and white photo of a clock tower

The following vendors have been vetted and approved for sub-processing of various data types. Each vendor undergoes a rigorous process which includes a review of business practices, privacy practices and security practices.

the word action on a white background

We use Action1 as our Patch Management and Vulnerability Assessment tool.

GDPR Compliance

Privacy Policy

the logo for adigy

We use Addigy to manage our schools’ iPads. The Personal Data we may process in Addigy may include names and addresses and email addresses.

GDPR Data Protection Agreement

Privacy Policy

the logo for avanan

There is no hosting as such, as it connects to Microsoft via an API.

Axcient Logo

All services are hosted in the EU

Axcient uses military-grade encryption when transporting data over Secure Sockets Layer (SSL) encrypted connections. From the SSL encrypted connections it routes to an HTTPS stand-alone processes running behind a firewall. Our Server Side Encryption (SSE) uses at minimum 128-bit SSL (128-bit) in transit and 256-bit Advanced Encryption Standard (256-bit AES) at rest.

the word ekte is written in red on a white background

Ekte provide web filtering services to schools.  Persnal data may be sent to help resolve helpdesk issues.

the logo for hemdal

Database and backups are located in Azure West Europe – Holland

We use Heimdal Security as our preferred choice anti-virus, anti-malware and anti-ransomware provider.

Privacy Policy


Nasstar provide Internet Connectivity and Firewall services to school.  Data may be sent to help resolve issues and customer queries.

a black and white logo with the letter d


All services are hosted in the UK or EU, with the exception of Microwoft Sway which is hosted in the United States

Data is encrypted at rest and in transit, using several strong encryption protocols, and technologies that include Transport Layer Security/Secure Sockets Layer (TLS/SSL), Internet Protocol Security (IPSec), and Advanced Encryption Standard (AES)