Compliance, by design.
Safeguard Vision is built to help your school meet UK GDPR, the Data Protection Act 2018, and ICO guidance for processing images of children. Below is a plain-English summary of what we do and how it maps to your obligations.
GDPR Article 5 — data minimisation
Article 5 requires personal data to be adequate, relevant, and limited to what is necessary. By anonymizing faces before publishing photos to your public website, Safeguard Vision keeps your published media in line with the principle of data minimisation — you publish the moment, not identifiable individuals.
UK ICO guidance on biometric data and children
The Information Commissioner's Office classifies images of identifiable individuals — particularly children — as sensitive personal data. Schools have a stronger duty of care, and the ICO recommends a safeguarding-first approach. Safeguard Vision provides the technical control needed to demonstrate this duty in practice.
DPA 2018 record-keeping requirements
The Data Protection Act 2018 requires you to keep records of processing activities. Safeguard Vision's automatic audit log records who anonymized each image, when, at what level, and how many faces were processed — meeting the record-keeping requirement without manual work.
How your data is processed
Images are processed in-transit only. Anonymization happens on your WordPress server, not externally. No image content is stored on our servers — only metadata about the action: filename, level, count of faces detected, and the WordPress user who initiated it.
Data Processing Agreement
Need to file a DPA with your DPO? Download our pre-filled template and adapt it for your school.