AI tool summary for DPOs and governors
Attend (School Synergy)
School Synergy · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Amber · Use with caution
- Doesn’t say whether it trains on what you type
- 3 of 6 key fields not stated
Pupils: Red · Not recommended for school data
- Supplier says it is not for pupils
| Supplier | School Synergy |
|---|---|
| Category | attendance |
| Pupil-facing | no |
| Processor or controller | processor (school is controller, per DPA) |
| Where data is stored | UK (and EEA where applicable); no transfer outside unless authorised, with SCCs/IDTA (DPA) |
| Trains AI models on inputs | not stated |
| How long inputs are kept | not stated |
| Data processing agreement (DPA) | https://www.attending.school/schooldata/pages/data/Attend%20Data%20Processing%20Agreement.pdf |
| Signs individual DPAs with schools | yes - DPA template names the school as controller |
| UK GDPR representative / DPO | DPO: Alan Cree (named on policies page) |
| Minimum age | not stated |
| Key safety note | Cyber Essentials; working towards ISO 27001 (target Autumn 2026); AI features not described in published documents |
| Main use | Attendance, behaviour and communication |
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://www.attending.school/about-us/policies-data · https://www.attending.school/schooldata/pages/data/Attend%20Data%20Processing%20Agreement.pdf
Full entry: aiprefect.co.uk/tools/attend. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.