SureMatters

Explore innovative EdTech solutions · Bett UK 2027

Local-first by default. Your documents do not transit our infrastructure under any tier.

A lot of what is being sold to schools as AI in 2027 sends customer documents to a third-party AI service. The school's DPO says no; the IG officer says no; the procurement-pack reviewer says no. They are right to say no. A SAR file contains the most sensitive personal data the school holds about a single person; the data subject is entitled to it; nobody else is. SureMatters is the contrarian shape that resolves this dilemma.

SureMatters Ltd is not endorsed by or affiliated with Bett; this page is editorial. Accuracy concerns to hello@surematters.com.

The trust commitments — auditable, not aspirational

  • Local-first. SureRedact runs on the operator's desktop. Customer documents do not leave the operator's device.
  • No third-party AI in the path. Detection is rule-based apart from the signature detector, which is one small on-device machine-learning model. There is no OpenAI / Anthropic / Google AI / AWS Bedrock / Azure OpenAI call against your customer documents under any tier or any add-on.
  • Operator-final-decision. No setting enables autonomous redaction. The decisions log structurally cannot record a redaction made without a human.
  • Tamper-evident audit trail. Every operator decision is logged; entries cannot be edited or deleted; tampering is detectable. The disclosure pack ships with the audit log.
  • You can see everything that leaves. We operate no telemetry service, and none has ever been transmitted to us: the operational records the software keeps stay on the operator's machine, visible and clearable in Settings. The one thing that leaves is an error report when something goes wrong, stripped of file paths and content on the machine before it is sent, and switchable off — the operator is asked on first run.

Why the architecture defends itself

Cryptographic integrity on every release we publish, on detector bundles, and on licence files. Coordinated-disclosure programme with safe harbour for good-faith research. Subprocessor list public and short (Cloudflare, Plausible, Anthropic for engineering AI only, Bugsink, Keila, Google Cloud, Google Workspace, Microsoft and Xero for our own operations — not for your documents; Stripe contracted but not yet in use). A DPIA template pre-filled with our positions and a processor agreement narrower than a typical SaaS one, because we do not process your documents; both on request from policy@surematters.com rather than published.

Read the trust pack: Security overview · AI Policy · Telemetry transparency · Subprocessors.

Both sectors, same architecture

SureMatters serves state-maintained schools, MATs, and independent schools on one page. The trust commitments are identical across sectors; the regulatory perimeter and procurement context differ in ways the landing page calls out where it matters.

Schools landing page: /for-schools.

If you're at ExCeL on 20–22 January

We're not exhibiting. By January 2027 SureRedact will have been live since summer 2026; the SurePrepare pilot has been running since the autumn; and additional products become available during 2027. Professional is sold by direct enquiry — we have not committed to a date for self-service purchasing. A further pilot cohort opens around the time of the show; apply via the contact form.

Apply for a pilot → · For schools → · All events →

Not exhibiting, but here for the conversation.

We attend, listen, and recruit pilots from the operators we meet.