Policy builder
Ten questions, then a policy
Answer for your school as it is today, not as you would like it to be. Each answer picks the wording for one part of the policy, and you can change any of them before you download.
- 01
What kind of setting is this policy for?
This mostly decides pupil use, because the age limits on consumer AI tools settle most of it for you.
- Primary
- Secondary
- All-through
- Special
- FE college
- 02
Is this for one school, or for a trust?
A trust gets a common core, with local annexes for staff use, pupil use and the tools register.
- Single school
- Trust, with local annexes
- 03
Are you an approved exam centre?
This switches the whole assessment section in or out.
- Yes
- No
- 04
How should staff use AI?
Approved tools only is easiest to police. Permitted with rules is the most realistic where use is already widespread.
- Approved tools only
- Permitted with rules
- Case by case
- 05
How should pupils use AI?
Permitted with disclosure is realistic only for older students and colleges.
- No access
- Supervised classroom use
- Permitted with disclosure
- 06
Which platform does the school run on?
The AI already inside a platform you hold a data processing agreement with is usually the safest first answer to which tool staff can use. Apple devices, a local authority network or a smaller platform all count as something else.
- Google Workspace
- Microsoft 365
- Both
- Something else
- 07
Where is the school with AI right now?
This sets the tone of the position statement and how often the policy is reviewed.
- Exploring
- Piloting
- Embedded
- 08
Is there a working DPIA process?
If not, the policy creates one, because approving any tool depends on it.
- Yes
- No, the policy should create one
- 09
Who is the DPO, and who owns this policy day to day?
Role titles, not names, so the policy survives staff changes. We have filled in the usual ones; change them if yours differ. For a trust, use trust-level titles.
- Data protection role: Data protection officer
- Policy owner: Deputy headteacher
- 10
Has your filtering provider confirmed, in writing, how it handles AI?
If not yet, the policy adds a dated action to get that answer.
- Yes
- Not yet
No AI writes any of this. Every sentence comes from a fixed clause library (version 1.0), so the same answers always give the same policy, word for word. Your answers stay in your browser and in the link.
Prefer to edit a file? The model policy, assembled from the default answers, is here as a Word document (18 KB) or a PDF (139 KB).