For procurement and data teams
This page brings together the operational information a school or trust needs before ordering YIP.
For school-controlled workspace content, the school or trust is the controller and YIP acts as processor on its documented instructions. YIP is an independent controller for account administration, security logs, enquiries and billing records.
The service is designed not to require pupil personal data. Users are repeatedly told not to enter names or identifying details. Customer data is used only to provide, secure and support the service; it is not sold.
The contract covers confidentiality, security, approved subprocessors, assistance with data-subject requests, deletion or return at the end of service, audit information and breach notification without undue delay. A school-specific DPA can be supplied with the order form.
| Provider | Purpose | Data involved |
|---|---|---|
| Vercel | Application hosting, delivery, security controls and AI Gateway routing | Account details, requests and encrypted application traffic |
| Supabase | London-region database, authentication and private file storage | Accounts, workspace content and protected resources |
| Stripe | Subscription checkout, invoices and billing portal | Customer and payment administration; YIP does not store card details |
| ICUK | Transactional email delivery | Recipient address and the content of the service email |
| OpenAI and Perplexity | YIP Assistant generation and optional live web research, routed through Vercel AI Gateway | The question, selected YIP context and generated response; users are told not to enter identifiable pupil information |
Material changes to this register will be notified to contracted organisations. Applicable vendor transfer safeguards and locations are recorded in the signed order and DPA.
YIP is built toward WCAG 2.2 AA, including keyboard access, visible focus, semantic headings, labelled forms, contrast and responsive layouts. This is a service objective, not a claim that an independent audit is complete. Report a barrier to hello@yourinclusionpartner.co.uk; we will acknowledge it within two working days and provide a workaround where possible.
Encrypted HTTPS, secure authentication cookies, least-privilege roles, database row-level security, private file storage with short-lived download links, audit trails, security headers, server-side validation and automated bot protection protect the platform. YIP Assistant history is private to each account and automatically deleted after 90 days.
Suspected incidents are contained, investigated, documented and reviewed. Affected customers receive the known facts, likely impact, mitigation and next update without undue delay. Where YIP acts as processor, it supports the controller with the information needed for its own regulatory assessment.
Account or access incidents are prioritised first. General support and expert questions have a two-UK-working-day initial response target. Planned maintenance is communicated when it may affect normal use. Contract-specific service commitments are stated on the order form.
Your Inclusion Partner is the service and trading name. The contracting legal name, business address, VAT treatment, term, participating schools, seat allowance and authorised-use licence are confirmed on the quote and order form before signature. A school licence permits use by its authorised staff for internal educational purposes; it does not permit public redistribution, resale or sharing access outside the licensed organisation.
Read the platform terms or email hello@yourinclusionpartner.co.uk for a completed supplier information block.
