Legal and compliance

Supporting information and templates to help your organisation complete its own data protection impact assessment.

A practical overview of key data protection and information governance risks, Trellis safeguards and common questions from MATs and schools.

Our standard customer agreement, including the data processing terms governing Trellis's processing of personal data on your organisation's behalf.

An overview of the technical and organisational measures Trellis uses to protect customer and pupil data, including hosting, access controls, encryption, resilience, monitoring and incident management.

Trellis is certified to ISO/IEC 27001, the world's leading international standard for managing information security.

Trellis is Cyber Essentials certified, a UK government backed scheme designed to protect organisations against the most common cyber threats.

See the third-party service providers that process customer data on behalf of Trellis, what they provide and where relevant processing takes place.

How Trellis collects and uses personal information through our website and in our own business activities.

How personal data is processed when schools, MATs and other organisations use Trellis's service.

Our principles for the safe, transparent and responsible use of AI in Trellis.