AI & Data Policy
Effective Date: April 2026 · Version 1.0
Our AI Principles
SENSA uses AI as a professional support tool — never as a decision-maker. We are committed to responsible, transparent, and human-centred AI. Every AI output is a recommendation for a qualified professional to review. Children and their educators are always in control.
| Legal entity | Sensa Technology Ltd (incorporated in England and Wales) |
| AI enquiries | contact@sensatech.co.uk |
| Governing law | England and Wales; UK GDPR; ICO AI Guidance (2024) |
| Companion documents | Terms & Conditions · Privacy Policy · Cookie Policy |
1 How SENSA Uses Artificial Intelligence
1.1 SENSA uses artificial intelligence across three functional areas:
| Function | AI Role and Description |
|---|---|
| SENSA Observe | Pattern-recognition algorithms that analyse anonymised classroom work signals to generate a ranked need-signal watchlist. The model does not diagnose. It generates probability-weighted indicators for SENCO review only. |
| SENSA Adapt | AI pipeline that transforms curriculum content into parallel adaptations for six SEN need-type profiles. The AI does not receive pupil-identifying data — it receives content and a need-type instruction only. |
| SENSA Evidence | Structured data compilation engine that assembles intervention records, need-signal history, and teacher notes into statutory-format documentation. AI assists formatting and summarisation; the substantive content is teacher-generated. |
1.2 SENSA does not use AI for:
- Diagnosing or formally assessing special educational needs;
- Making decisions about pupils without human review and sign-off;
- Profiling pupils based on protected characteristics under the Equality Act 2010 in a discriminatory manner;
- Generating content to be presented to parents or local authorities without SENCO review;
- Any automated processing that produces legal or similarly significant effects on a child, without human-in-the-loop oversight.
2 AI Model Transparency
2.1 SENSA currently uses third-party foundation models enhanced with SENSA-specific fine-tuning layers aligned to the SEND Code of Practice 2015, with the aim of using custom models in future. A current list of model providers is published at sensatech.co.uk/ai-models.
2.2 SENSA maintains an AI Model Register documenting: the models in use; their intended function; their input and output data types; and the safeguards applied to each. The Register is available on request to school data controllers, MAT data leads, and DPOs.
2.3 SENSA's need-type adaptation models are reviewed for bias and fairness at least annually against a representative sample of UK pupil demographics. The results will be published in our annual AI Transparency Report.
2.4 SENSA will not knowingly deploy a model that produces systematically different outcomes based on a pupil's ethnicity, gender, socioeconomic status, or English proficiency in a way that is unrelated to the SEN adaptation objective.
3 Data Architecture and Security
3.1 Architecture principles:
| Principle | Implementation |
|---|---|
| Per-school data siloing | Each school's data is stored in a logically isolated environment. No cross-school data queries are possible without explicit consent from both schools. |
| Pseudonymisation at ingestion | Pupil Data is pseudonymised on upload. Real identifiers are stored separately and cannot be reconnected within the AI processing pipeline. |
| No PII in AI prompts | Technical controls prevent the transmission of personally identifiable pupil data to external AI APIs. This is enforced at the application layer. |
| Encryption at rest and in transit | All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Encryption keys are managed using a dedicated key management service. |
| On-premises option (MATs) | Multi-Academy Trusts may request an on-premises deployment option for enhanced data sovereignty. Subject to separate technical agreement. |
| Access controls | Role-based access control (RBAC). Authorised Users can only access data for their own class or year group. SENCOs have school-wide access. SENSA staff cannot access school data without a documented support request. |
3.2 SENSA operates an information security management system (ISMS) aligned to ISO/IEC 27001 principles. Formal certification is targeted before the end of the 2026 calendar year.
3.3 SENSA conducts a Data Protection Impact Assessment (DPIA) for each new feature or significant change to processing operations that may present a high risk to the rights and freedoms of data subjects, in accordance with UK GDPR Article 35.
3.4 In the event of a data breach affecting AI processing pipelines or model inputs/outputs, SENSA's incident response procedure applies in full. See Privacy Policy Section 7 for notification timelines and obligations.
4 Automated Decision-Making and Human Oversight
Human-in-the-Loop: A Hard Requirement
No SENSA AI output ever constitutes a final decision about a child. Every need-signal watchlist entry, every adapted resource, and every EHCP evidence pack requires review, professional judgement, and sign-off by a qualified person before any action is taken. Schools that rely on AI Output without professional review are in breach of the Terms and Conditions.
4.1 In accordance with UK GDPR Article 22, SENSA does not make solely automated decisions about children that produce legal or similarly significant effects. All SENSA Outputs are recommendations subject to human review.
4.2 SENSA Observe produces a ranked watchlist — a prioritisation aid for SENCOs. It is not a diagnosis. The SENCO (or designated teacher) must review all watchlist entries and determine whether further action is warranted. The watchlist cannot be used as evidence of SEN need without professional corroboration.
4.3 SENSA Adapt produces content alternatives. Teachers retain full discretion over which adaptations to use, modify, or discard.
4.4 SENSA Evidence produces draft documentation. All draft content must be reviewed, edited, and approved by the SENCO before submission to any local authority, parent, or external body. SENSA explicitly prohibits the submission of unreviewed AI-generated EHCP evidence.
4.5 SENSA will incorporate explainability features into the Platform to ensure that SENCOs can understand why a pupil has appeared on the watchlist. Need-signal summaries will cite specific observable classroom indicators.
5 Bias, Fairness, and Equality
5.1 SENSA is committed to equitable outcomes for all pupils regardless of their background. We acknowledge that AI systems can encode and amplify existing biases if not carefully designed and monitored.
5.2 Our bias mitigation commitments include:
- Training data review: Foundation models used in SENSA are evaluated for known demographic biases before deployment.
- Output auditing: A random sample of Outputs is reviewed quarterly by our advisory SENCO panel for evidence of systematic variance by demographic group.
- Teacher-facing transparency: Need-signal indicators cite specific, observable classroom behaviours rather than inferential judgements about pupil characteristics.
- Equity testing: SENSA Adapt adaptations are evaluated to ensure that the same learning objective is maintained across all adapted versions — no reduction in academic expectation.
5.3 Schools are encouraged to report any observed output that appears to reflect bias, stigmatise a pupil, or treat a pupil differently based on a protected characteristic. Reports should be sent to: contact@sensatech.co.uk.
6 AI and Safeguarding
6.1 SENSA acknowledges that the Platform operates in a safeguarding-adjacent context. The following safeguarding commitments apply:
- SENSA staff with access to school data will undergo enhanced DBS checks and safeguarding training.
- The Platform includes built-in content filters that detect and flag teacher-uploaded materials containing content inappropriate for a school context.
- Need-signal watchlists indicate potential SEN support needs only — they are not a substitute for the school's statutory safeguarding procedures.
- Where AI processing surfaces content that may indicate a safeguarding concern beyond SEN (e.g. disclosed abuse in pupil writing), the Platform provides a clear prompt to the reviewing teacher to follow the school's safeguarding protocol.
- SENSA will never retain or use any disclosed safeguarding content for model training or product development purposes.
6.2 SENSA's safeguarding lead is contactable at: contact@sensatech.co.uk.
7 Changes to AI Models and Processing
7.1 SENSA will notify schools at least 30 days in advance of any change to:
- The AI models used to process Pupil Data;
- The nature of data inputs to AI models;
- The sub-processors used for AI inference;
- Any feature that materially changes how need-signal generation operates.
7.2 Where a change requires an update to the DPA, SENSA will provide a revised DPA and obtain re-execution before the change takes effect.
7.3 Schools that object to a proposed change may terminate their subscription without penalty by providing written notice within 14 days of the change notification, effective from the date the change would take effect.
8 Compliance Framework
8.1 SENSA operates in compliance with the following legal and regulatory frameworks:
| Framework | Relevance to SENSA |
|---|---|
| UK General Data Protection Regulation (UK GDPR) | Primary data protection law. Governs all personal data processing. |
| Data Protection Act 2018 | Supplements UK GDPR. Schedule 1 conditions for processing special category data. |
| SEND Code of Practice 2015 (updated) | SEN identification, support, and EHCP obligations. Governs all SENSA Observe and Evidence outputs. |
| Keeping Children Safe in Education (DfE, 2024) | Statutory safeguarding guidance. All SENSA staff and processes are aligned to KCSIE. |
| DfE EdTech Framework | Procurement guidance for MATs. SENSA alignment is maintained to support MAT procurement sign-off. |
| Equality Act 2010 | Duty to ensure AI outputs do not discriminate on protected characteristics. |
| Online Safety Act 2023 (where applicable) | Content safety obligations for the Platform. |
| ICO Guidance on AI and Data Protection (2024) | ICO's published guidance on lawful, fair, and transparent AI in education contexts. |
| Children's Code (Age Appropriate Design Code) | Applicable to any feature where children interact directly with the Platform. |
9 Contact and Escalation
| Query Type | Contact |
|---|---|
| General AI and data queries | contact@sensatech.co.uk |
| Privacy and data rights | contact@sensatech.co.uk |
| DPO contact | contact@sensatech.co.uk |
| Security and data incidents (24/7) | contact@sensatech.co.uk |
| Safeguarding concerns | contact@sensatech.co.uk |
| Complaints escalation | contact@sensatech.co.uk |
| ICO (escalation) | ico.org.uk | 0303 123 1113 |
9.1 SENSA will acknowledge all written data protection and AI enquiries within 3 business days and respond substantively within one calendar month.
