Trust centre
Last updated 21 September 2026
Everything a school, trust or college needs to assess Ceidwad as a supplier, in one place and without an account. If something you need for your procurement process is missing, ask us — we would rather send it than have you guess.
Data protection
These are our own governance documents, not templates. They are the same files every customer sees inside the product, at the same version.
Every processing activity Ceidwad carries out, its lawful basis, who the data is shared with and how long it is kept.
The assessed risks of running this platform for schools, including the AI processing, and what we do about each one.
What we collect and why, our sub-processors, where data is held, how long we keep it, and your rights.
What Ceidwad can and cannot see, how we protect your data, and how to tell a genuine message from us apart from a scam.
Supplier assurance
Written down so you can hold us to it, and written at a level we can actually meet rather than one that reads well.
Support hours, what counts as critical, our target response times and how to escalate if we are not responding.
How the service is hosted and backed up, how you get your data out, what happens if we are unavailable, and what you are entitled to on exit.
The current architecture, what we have measured about recovery, and why the database runs without a hot standby today.
What we do not have
Rather than leave you to discover these at questionnaire stage:
- No independent penetration test yet
Our code has been reviewed thoroughly in-house and the findings fixed, but no external test has been carried out. We do not think a security supplier should self-certify, so this is booked work rather than a position we defend.
- No professional indemnity or cyber insurance yet
Cover is being arranged. If your procurement requires evidence of it before onboarding, tell us and we will confirm where we have got to rather than let you find out late.
- No certifications
We hold no ISO 27001, SOC 2 or Cyber Essentials certification, and we do not display badges we have not earned. Where we align to a framework we say so as a statement you can check, never as a claim of certification.
Ask us for something else
If your procurement process needs a document that is not here — a completed supplier questionnaire, a data flow diagram, a specific contractual term — email security@ceidwad.co.uk and we will answer, including where the answer is that we do not have it yet.