The school, trust or college asked how you protect pupils’ data. Have the approved records ready.
Schools, multi-academy trusts and colleges are careful about who handles pupil data, and their procurement teams ask suppliers to show it. ClearIMS helps you build and run an ISO 27001 information security management system (ISMS), so your answers come from policies, risks and evidence that are written down, owned and current.
20 minutes with the founder · video or phone · free. Look round a fully set-up demo company first, then £300 a month, billed monthly, cancel with 30 days’ notice. No VAT charged. Optional setup consulting from SW Digital Services is £500 to £700 a day.
What education buyers ask you for
Supplier data protection and security questions
Trusts and local authorities send questionnaires or forms before approving a product. They ask what data you hold, where, who can access it and how incidents are handled.
Tender and framework requirements
Larger contracts and frameworks may ask for Cyber Essentials, ISO 27001 or both, or for a description of how you manage security.
Safeguarding-sensitive data
Because the data is about children, buyers expect clear access control, retention and breach handling, with named owners.
Consistency across buyers
Every trust asks in its own way. Answers must agree with each other, year after year.
ISO 27001 isn’t a schools’ scheme and ClearIMS doesn’t give legal or regulatory advice. It is a management system that gives you one set of approved records to answer any education buyer from.
How ClearIMS helps a small supplier keep up
Drafting and admin are what ClearIMS is built to take on. A named person in your organisation approves every record; the AI never approves anything.
Questionnaire answers drafted from your records
Once AI is activated, it drafts answers to customer security questionnaires from your approved records, with sources, so you can check each answer against the policy it came from before it goes back.
A virtual ISMS manager in your inbox
ClearIMS emails owners about outstanding and overdue actions, and they reply in plain English to update them. Reviews and checks don’t quietly slip, and the record shows who did what.
Processing records and training in one place
Record each processing activity with its lawful basis, transfers and retention, and keep a matrix of who needs which awareness training. ClearIMS is not legal advice and doesn’t make you compliant with UK GDPR; it helps you keep the records.
Got 5 minutes or 5 hours? Start at the top
The Recommended tasks list puts the ISO 27001 work in order, most important first. Whenever someone has time, they work down it, and every task they finish moves your ISMS forward.
Questions we get asked
Do schools require ISO 27001 from suppliers?
It depends on the buyer and the contract. Some ask for it, some ask for Cyber Essentials, and many ask questions without naming a standard. A running ISMS helps with all three.
Does ClearIMS make us UK GDPR compliant?
No. It isn’t legal advice. It helps you keep the processing records, risks, policies and evidence in one place.
Can I see it before committing?
Yes. Try the demo company, an invented business with its ISMS fully set up, read-only. After that it is £300 a month, billed monthly, cancel with 30 days’ notice.
Bring your last trust questionnaire to a 20-minute call.
We’ll show you how ClearIMS would handle it and give you a straight answer on whether it fits your team.
- Try the demo company first: an invented business with its ISMS fully set up, for you to look round.
- Then £300 a month, billed monthly. Monthly plans cancel with 30 days’ notice.
- One price for your organisation, unlimited users. No VAT charged.
- Optional setup consulting from SW Digital Services: £500 to £700 a day, quoted per job.
FURTHER READING
What is a customer security questionnaire, and how do you answer one?
7 min read · UpdatedWhy customers send security questionnaires, what they ask, how to answer them quickly and honestly, and how ISO 27001 makes the next one easier.
Cyber Essentials vs ISO 27001: which do you need?
7 min read · UpdatedThe difference between Cyber Essentials and ISO 27001, what each costs and proves, and which to do first if a customer or tender is asking.