What we do not assess (ST4S Excluded List)

ST4S Excluded List #

The Safer Technologies for Schools (ST4S) assessment is focused on evaluating digital products and services that are essential for the educational environment, ensuring they meet high standards for security, privacy, and interoperability. The following categories of services are not assessed by ST4S due to their specialised nature or because they fall outside the primary educational context:

General Exclusions #

Self-Hosted Services:

  • Software hosted and managed by the school on their own cloud service provider or local infrastructure. However, if a service is self-hosted but fully managed by the service provider (including security scanning, support, and backups), it may be considered for assessment.

Networking Products or Services:

  • Firewalls
  • Internet filters
  • VPNs, proxies, and other networking services

Remote Device Controlling Software:

  • Any software that allows for remote access and control of student or teacher devices.

Password Managers and Credential Storage Services:

  • Services specifically for managing and storing passwords and other credentials.

Public Social Media Networks and Services:

  • Social media platforms not specifically designed for school use (e.g., Facebook, Twitter, Discord). Forums and social media platforms offering schools their own tenancy and isolated environment may be considered.

Human Resource Services:

  • Services such as reference checks or background checking services.

Artificial Intelligence as a Service:

  • AI services not specifically designed or suitable for educational purposes. Examples include chat bots and services which do not provide schools with features to limit or restrict functions and settings on student accounts or generative AI models which produce responses or content not appropriate for younger audiences.

Purchase Management Software, Vendor Management, and Procurement Software:

  • Software related to purchasing and vendor management not directly related to educational services.

Physical Building Management Services:

  • Services such as physical security systems, smoke alarms, surveillance cameras, and CCTV hardware.

Professional Services:

  • Consultants and agencies delivering professional services without a specific application that students, teachers, or parents register and log into.

Services with Unrestricted Communication Features:

  • Services with communication features accessible to the general public, which a school cannot restrict or limit to their school or classroom. Examples include multiplayer games or social media services that do not provide an administrator account for schools to control student communication

Artificial Intelligence (AI) Exclusions #

The following is specific to AI systems, models, features and functionalities.

Data Profiling:

  • Processes data that may be used to create profiles of individuals or groups that are used to further develop the model or other purposes not within the primary interest of the school.

Biometric and Attribute Processing:

  • Processing biometrics, human attributes, motions, metrics or attributes whether physical or mental (e.g. facial recognition and scanning, eye tracking, detecting movement, determining or predicting emotions, student disability, learning difficulties etc.).

Student Monitoring and Management:

  • Student monitoring, behaviour management and observation services

Administrative Decision Making:

  • Administrative support and decision making (e.g. automatically vetting enrolment or scholarship applications, complaint handling, disciplinary action etc).

NSFW AI Models:

  • Utilising NSFW AI models, producing or outputting NSFW content or any other content that may be deemed offensive by a reasonable member of the school community.

*NSFW: Not Safe for Work – is a general term used to describe any content that may be deemed inappropriate to create, view or access whilst in the workplace and schools. NSFW content includes content that may be deemed inappropriate for younger audiences (e.g. person’s under 18).

Health and Wellbeing Data Processing:

  • Applications or services which process health and wellbeing data (e.g. physical or mental health, fitness, meditation, food consumption, body metrics etc).

Prohibited Uses:

  • Prohibited uses as defined under the EU AI Act.

Ethical and Safety Concerns:

Any application of AI that may be considered by the ST4S Team, a ST4S Working Group member or a reasonable member of the school community to be:

  • Invasive
  • Unethical
  • Pose a risk to safety, human rights or privacy
  • Not be within the best interests of the student and/or school