The finalised guidance introduces major changes, including paragraph 171 on filtering and monitoring, that need academic, safeguarding, technology and privacy teams working together, not in isolation. Book a demo to see how the 9ine Platform brings your Diamond Formation together, with evidence ready for September.
See how the Diamond Formation works ↓Complimentary access to the 9ine Platform. Test it out for yourself — just ask our team.
No cost, no commitment.
AI and emerging technology cannot be governed by one person, one policy or one department. Academic opportunity, safeguarding risk, technical implementation and data protection all need to be considered together.
Ensures technology and AI support teaching, learning, assessment, workload and student agency.
Identifies risks linked to online harms, child protection, digital safety and harmful interactions.
Assesses implementation, access, configuration, monitoring, filtering and cyber security.
Reviews personal data, lawful processing, DPIAs, vendor due diligence and data-sharing risks.
The Diamond Formation is not another committee for the sake of it. It is the operating model that helps schools turn strategy into action and policy into practical decision-making.
The finalised guidance, in force from 1 September 2026, points schools towards a more joined-up approach to safeguarding in a digital environment. Most schools already have policies. The harder question is whether they can evidence that those policies are working in practice.
Paragraphs 165–166 bring generative AI explicitly into the statutory framework. Identify where AI is being used, which tools are approved, what risks have been assessed, and how use is reviewed.
Evidence age-appropriate education and risk management around online safety, including AI-generated content, deepfakes, harmful content and digital contact risks.
Paragraph 171 now names who must lead the annual review: the SLT member responsible for filtering and monitoring, supported by the DSL and IT support. It also requires a formal record of checks on every internet-connected device.
Maintain evidence of lawful processing, Records of Processing, DPIAs, retention, rights requests, incidents and vendor involvement.
Show that technology systems are being managed securely, with appropriate controls to protect children's personal information and reduce safeguarding and data breach risk.
Provide senior leaders and governors with clear reporting on progress, risk, ownership, review status, training, incidents and outstanding actions.
A live walkthrough, not a sales pitch.
Schools may have policies, risk assessments, approved tools, contracts and incident records. The issue is whether all of this work is connected, owned, reviewed and ready for leadership assurance.
| Requirement | 9ine Platform | Spreadsheets | Disconnected tools |
|---|---|---|---|
| Paragraph 171 filtering & monitoring review | ✓ Named owners, device checks, records | Manual | Partial |
| AI tool visibility and review | ✓ Approved tools and review workflow | Manual | Partial |
| Vendor risk across privacy, AI, safeguarding and cyber | ✓ Multi-lens vendor assessment | ✗ | Partial |
| Records of Processing and DPIA workflows | ✓ ROPA and DPIA workflows | Manual | Partial |
| Staff training evidence | ✓ Training records and completion evidence | Manual | Partial |
| Governor-ready reporting | ✓ Dashboards and assurance reporting | ✗ | Partial |
A practical route from reviewing the finalised requirements to a cross-functional operating model, platform workflows and leadership-ready assurance.
Review the finalised KCSIE 2026 requirements and identify where evidence needs strengthening before September.
Define roles, responsibilities, reporting cadence and escalation routes.
Set up the right modules, workflows, registers and dashboards for your school.
Review vendors, AI-enabled systems, applications, risks, contracts and training needs.
Give senior leaders and governors clearer evidence of progress, risk and ownership.
Feedback from leaders working across the four areas of the Diamond Formation.
"Giving teachers agency has been the difference. We can now show how AI is genuinely supporting teaching and learning, not just point to a policy on a shelf, and that evidence has driven real buy-in from staff."
"For the first time, online safety, filtering and monitoring and our DSL's oversight all sit in one place. When governors ask us to evidence it, I can produce it in minutes rather than piecing it together from inboxes."
"Paragraph 171 turned the annual review into a named responsibility. Having the checks, device records and owners tracked in one platform means nothing gets missed, and my team can focus on the work that actually matters."
"DPIAs, records of processing and vendor due diligence used to live across spreadsheets nobody trusted. Now it is connected, owned and reviewed. I feel ready for scrutiny rather than braced for it."
Book a demo to see how the 9ine Platform brings your Diamond Formation together, academic, safeguarding, technology and privacy, to manage KCSIE 2026 evidence, including paragraph 171, ahead of September.
Built around the Diamond Formation. One operating model, not four disconnected teams.
No cost, no commitment. The demo is free either way.
Ready before September. A full term to get evidence in place.
No cost, no commitment.