Compliance posture
TutorStudio is built so that statutory compliance is not a separate product. The four sections below describe the obligations we hold ourselves to, the evidence behind each, and where to read further.
We meet all fifteen standards of the Information Commissioner’s Children’s Code. Each standard is mapped to an implementation control, with documentary evidence held in the repository. The public statement below sets out the mapping in full, including DPIA references, implementation status, and review dates.
Every safeguarding obligation under KCSIE 2025 is mapped to a system control and recorded in an append-only safeguarding log. Designated Safeguarding Lead routing, MASH escalation, and ICO notification templates are configured by default. Bulk DBS posture and tutor re-verification cadence are tracked at agency and school level.
TutorStudio Ltd is registered with the Information Commissioner’s Office as a data controller. All personal data is held on UK-region infrastructure with no routine cross-border transfer. A Data Protection Officer is designated for the platform; the designation document and Record of Processing Activities are provided to schools and agencies on request. Subject access requests are handled within statutory timescales free of charge.
The platform records a per-engagement IR35 Status Determination Statement with the working-practices evidence captured at the point of decision. Agency invoicing meets the documentary requirements of the Employment Agencies Act and the Conduct of Employment Agencies and Employment Businesses Regulations. These features are available on every tier, including Free.
Contact the Data Protection Officer at dpo@tutorstudio.io. The DPO designation document, including escalation pathways, is available on request and from the AADC compliance statement.
TutorStudio Ltd, company number 17233633, registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.