Legal & Compliance Hub
Legal documents and compliance
Find the policies and agreements that apply to website visitors, schools, individual accounts, and Willow's security and safeguarding work.
Download school compliance summaryWebsite visitors
Privacy information for the public Willow website.
Schools and school-managed accounts
Documents for schools, staff, Students, and families using Willow through a school.
School Terms of Service
PolicyThe terms that govern school and staff use of Willow.
School Product Privacy Policy
PolicyHow we handle personal data for school-managed Willow accounts.
School-account Privacy Information for Parents and Students
PolicyPlain-language privacy information for families using school-managed accounts.
School Acceptable Use Policy
PolicyThe rules for safe and appropriate use of Willow in schools.
Data Processing Agreement (DPA)
AgreementContractual commitments on data processing and GDPR compliance.
Data Protection Impact Assessment (DPIA) Template
TemplateA ready-to-use DPIA template for school procurement teams.
Individual accounts
Documents for self-service Students and their linked parent or trusted adult.
Individual Student and Parent Terms of Service
PolicyThe terms for self-service Student accounts and linked parent or trusted-adult accounts.
Individual Student and Parent Privacy Policy
PolicyHow we use personal information for individual Students and their linked Adults.
Individual Student and Parent Acceptable Use Policy
PolicyThe rules for safe and appropriate use of individual Willow accounts.
Security and assurance
Security, safeguarding, supplier, incident, and regulatory information.
Security & Safeguarding Measures
SafeguardingThe technical, organisational, and safeguarding controls used by Willow.
DfE AI Safety Standards Briefing
BriefingMarch 2026 mapping of DfE AI standards to Willow's school-ready controls.
Sub-processor List
RegisterA transparent list of trusted vendors that support Willow.
Incident Response Plan
PlanClear steps we follow to detect, report, and resolve incidents.
ICO Registration
CertificateOur UK Information Commissioner registration certificate.