Tapestry
The Foundation Stage Forum Ltd · EYFS learning journal · Last checked 2026-10-23
Rating: a rules-based summary of the supplier’s published terms. Not legal advice and not a substitute for a DPIA. How it’s worked out
Staff and pupils: AMBER Use with caution
Why amber:
Key facts
- Trains on what you type
- Not stated
- Where data is stored
- UK / EU
- Minimum age
- Not stated
- Use case
- EYFS and primary learning journals
- Sector
- Schools
- Research status
- Partial
Safer alternatives
Same main use (EYFS and primary learning journals) and sector, rated better for the same audience. Alternatives are suggested from our published ratings; check they meet your needs. How alternatives are chosen
Staff and pupils
No better-rated alternative found yet: here’s what to look for.
- It acts as a processor for your school (not a controller)
- It doesn’t train its AI on what you type
- Data stays in the UK/EU, or transfer safeguards (standard contractual clauses, the UK IDTA or adequacy) are stated
- There is a data processing agreement (DPA) for schools
- The minimum age fits your pupils, or pupils use it through a school account
We’ve logged this gap and will research tools for it in our weekly update.
New here? Each field has a short explanation underneath. Our getting started guide explains what to look for and what to do next.
About the tool
- SupplierThe company that makes and runs the tool.
- The Foundation Stage Forum Ltd
- WebsiteWhere we found the main information about the tool.
- https://tapestry.info/
- CategoryWhat sort of tool it is, for example a chatbot or a lesson-planning helper.
- EYFS learning journal
- Pupil-facingWhether pupils use it directly, or only staff. Pupil use needs extra care.
- children's records (staff/parent use)
Your data
- Processor or controllerA processor only uses data on your school’s instructions. A controller makes its own decisions about the data, which means your school has less say.
- processor (setting is controller)
- Where data is storedWhich country the data is stored in. UK or EU storage is usually simpler for schools.
- UK company; sub-processors may be inside or outside UK/EEA
- Trains AI models on inputsWhether what you type (or upload) may be used to improve the supplier’s AI. “No” is what you want for anything about pupils or staff.
- not stated
- How long inputs are keptHow long the supplier keeps what you type before deleting it.
- not stated
Agreements and contacts
- Privacy noticeThe supplier’s privacy notice: their own explanation of what they do with personal data.
- https://tapestry.info/security/
- Data processing agreement (DPA)The data processing agreement: the contract that sets out how the supplier must look after your school’s data.
- https://tapestry.info/wp-content/uploads/2025/12/Tapestry-Contract-Dec-2025.pdf
- Signs individual DPAs with schoolsWhether the supplier will sign a data agreement with your school specifically, rather than just standard online terms.
- yes - contract is the DPA
- UK GDPR representative / DPOWhether the supplier names a data protection officer or UK representative you can contact about data questions.
- not stated
Age and safety
- Minimum ageThe youngest age the supplier allows to use the tool. Check this before any pupil uses it.
- not stated
- Key safety noteAnything else worth knowing, such as admin controls or content filtering.
- AI features and AI training not stated in contract
- Research statusHow complete our research on this tool is.
- partial
Sources
Change history
No changes recorded since this entry was first published.
Quick answers
Is Tapestry safe for UK schools?
- AI Prefect rates Tapestry Amber for staff use (Doesn’t say whether it trains on what you type; 3 of 6 key fields not stated) and Amber for pupil use (Doesn’t say whether it trains on what you type; 3 of 6 key fields not stated; Minimum age not stated). This is based on the supplier's published documents, last checked 2026-10-23. It is not legal advice; complete your own DPIA.
Does Tapestry train on our data?
- Not stated. We could not find a published statement from the supplier on whether Tapestry trains its AI on what users type.
Where is Tapestry data stored?
- UK company; sub-processors may be inside or outside UK/EEA.
What age is Tapestry for?
- Not stated. The supplier does not publish a minimum age we could find.
Is there a safer alternative to Tapestry?
- We have not yet found a better-rated tool with the same main use. Our tool page lists what to look for instead.
Generated only from the facts above. “Not stated” means the supplier doesn’t publish it.
Spotted something out of date? Suppliers change their terms. Tell us and we will re-check it. This page is not legal advice; complete your own DPIA.