Security schools can see, understand and trust.
A clear view of how Teachmate protects school data, manages risk and supports your IT, data protection and procurement reviews.
Built for school scrutiny
The essentials, at a glance.
Clear answers to the first questions your school, trust, IT team or data protection lead will ask.
UK and EEA hosting
Primary hosting in London with encrypted disaster recovery in Dublin.
Encrypted by default
TLS 1.2+ in transit and AES-256 encryption for stored data.
Your data stays yours
Customer prompts, files, outputs and pupil data are not used to train AI models.
Controlled access
Role-based administration, supported SSO and MFA for privileged access.
Assurance you can evidence
Credentials backed by ongoing work.
We make our current position clear, share appropriate evidence with school reviewers and never present work in progress as completed certification.
Cyber Essentials certified
Our current certificate is available to schools and trusts in the security pack.
UK GDPR and DPA 2018
ICO registered, with processor responsibilities set out in our standard DPA.
Independent security testing
Annual external penetration testing alongside ongoing vulnerability management.
ISO 27001 programme
Certification work is in progress; current status and evidence are shared on request.
What we do to protect your school.
Practical technical and organisational safeguards are built into how Teachmate is hosted, operated and supported.
Keep school data in the UK and EEA
Customer content is hosted in AWS London, with encrypted disaster-recovery replicas in Dublin.
Protect data in transit and at rest
We use TLS 1.2 or later in transit and AES-256 encryption with managed keys for stored data.
Limit who can reach production
Privileged access requires MFA, follows least-privilege principles and is restricted to authorised personnel.
Never train models on customer data
Prompts, uploaded files, generated outputs and pupil data are not used to train our own or third-party foundation models.
Monitor, back up and test
Service monitoring, encrypted backups, recovery procedures and independent testing help us prevent and respond to issues.
Respond clearly when it matters
Security events are logged, triaged and escalated through a documented incident-response process.
Your route through the Trust Centre.
This page is the overview. Use these focused pages for policy, contractual and procurement detail.
Data protection
Our approach to UK GDPR, DPIAs, governance and responsible data handling.
Data Processing Agreement
Processor terms, retention, sub-processors, transfers and security responsibilities.
Privacy notice
How personal information is used and the rights available to individuals.
Trust Centre FAQ
Quick answers about deployment, safeguarding, data, security and procurement.
Terms and conditions
The terms governing use of Teachmate by individual educators, schools and trusts.
Security evidence and enquiries
Request our security pack, questionnaire responses or support for your review.
Need evidence for your school review?
We can provide our current Cyber Essentials certificate, Data Processing Agreement, DPIA support material, sub-processor list, security questionnaire responses and an independent penetration-test summary where appropriate.