SureMatters

For UK schools — maintained and independent, MATs and groups

The disclosure caseload, on your computer.

When a SAR lands, the 30-day clock starts and the records sprawl. SureRedact clears the redaction in minutes per Matter, on your own computer — your documents never leave your school’s, trust’s, or group’s devices.

Built for an SBM/SBL or bursar, not an IT team. SurePrepare (pre-redaction gathering and triage) is in private pilot.

Local-first by default

Your documents never transit SureMatters infrastructure, under any tier. The architecture makes the commitment structurally true, not aspirational.

Operator decides; tool logs

No autonomous redaction. Every decision sits in a tamper-evident audit log, shipped with the disclosure pack for the ICO, your inspectorate, or your DPO.

Procurement-pack ready

AI Policy, security, telemetry, subprocessors, and vulnerability disclosure are public and plain-English — built to clear due-diligence questionnaires fast.

What schools see in a typical term

Manageable — until a SAR lands. It’s often too broad, sometimes adversarial, and the records you need are scattered across MIS, email, pastoral notes, and ageing file shares while the 30-day clock runs down.

What that sprawl actually looks like

Time-limited; often too broad (“everything you hold about my child”); increasingly AI-assisted and so over-complicated; ex-pupil SARs that are sometimes adversarial; safeguarding-disclosure requests from external agencies (narrow scope, high sensitivity); all while the 30-day clock is ticking down. The records you need live across pastoral notes, behavioural incidents, parent communications, photographs, MIS extracts, registers, and historical email threads, sometimes going back several years — often somewhere in Microsoft 365 or Google Workspace, sometimes in an ageing on-premises file share, occasionally on an old PC or archived on tape or in a cloud cold-storage bucket.

Where the stakes differ:

What SureMatters does

See SureRedact → · See SurePrepare →

Conferences and events

We don’t exhibit. We attend, listen, and sign up pilots from the people we meet — word-of-mouth is how this product finds its audience.

Full list: /events.

What it costs

Per user, unlimited Matters. No per-school, per-academy, or per-MAT caps.

SureRedact Free

Free

always — genuinely unlimited PDF

Unlimited PDF redaction, auto-detection, and thirteen manual types. A genuine first step for occasional SARs.

SureRedact Professional

£499 / user / year + VAT

annual only — unlimited Matters

Adds Office / image import, the disclosure pack, SurePrepare SurePrepare Matter import, custom rules, vertical packs (2027), and backup automation.

The honest comparison

What your DPO will want to see

Procurement-pack, in plain English.

The procurement pack
  • AI Policy — what we do and don’t use AI for; the four hard boundaries; how to verify each.
  • Security overview — local-first, customer-deployed, tenancy-bounded; releases, detector bundles and licence files all cryptographically signed.
  • Telemetry Transparency — what the software records, why none of it reaches us today, and how to see and clear it on the machine.
  • Subprocessors — Cloudflare, Plausible, Anthropic (engineering AI; never customer documents), Bugsink, Keila, Google Cloud, Google Workspace, Microsoft, Xero, and Stripe (contracted, not yet in use).
  • Vulnerability Disclosure — coordinated-disclosure programme with safe harbour for good-faith research.

These are drafts pending legal review, and each carries its own version and date at the top. They say what we actually do — where a draft has turned out to describe something we do not do, we have corrected it and recorded the correction in the document.

Buying for your school or trust? Request a procurement quote → — we issue a quote with payment terms so you can raise a Purchase Order.

The disclosure caseload, handled on your computer.

Free SureRedact for PDFs, always. SurePrepare for pre-redaction triage is in private pilot.

The newsletter carries launch updates. No tracking pixels; unsubscribe any time.