AI tool summary for DPOs and governors
Echo360 (incl. GoReact)
Echo360 · Facts last checked 2026-10-23 · Printed 23 October 2026
AI Prefect
Staff: Amber · Use with caution
- Doesn’t say if it is a processor or controller
- Data may be stored outside the UK/EU; safeguards not stated
- No school DPA found
Pupils: Amber · Use with caution
- Doesn’t say if it is a processor or controller
- Data may be stored outside the UK/EU; safeguards not stated
- No school DPA found
| Supplier | Echo360 |
|---|---|
| Category | lecture capture / video assessment |
| Pupil-facing | yes - students |
| Processor or controller | not stated |
| Where data is stored | GoReact video in AWS US East or EU (Ireland) unless otherwise specified; international transfers permitted |
| Trains AI models on inputs | no - customer data not used to train underlying AI models (stated for GoReact) |
| How long inputs are kept | not stated |
| Data processing agreement (DPA) | not stated |
| Signs individual DPAs with schools | not stated |
| UK GDPR representative / DPO | not stated |
| Minimum age | not stated |
| Key safety note | not stated |
| Main use | Lecture capture and video platform |
Better-rated alternatives for the same use: Panopto (AI captions, summaries, study tools) (Amber), Kaltura (AI / Genie) (Amber)
Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.
Sources: https://echo360.com/privacy/ · https://support.echo360.com/hc/en-us/articles/38604362239629-GoReact-Technical-FAQs
Full entry: aiprefect.co.uk/tools/echo360. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.