Supplier assurance

Clear information for school due diligence.

A practical overview of company information, service governance, data protection, transition planning and the evidence schools can request during procurement.

A supplier schools can identify and assess.

OpsWise provides clear legal and contact information so procurement teams can complete basic checks before discussing service detail.

View the Companies House record
Legal entity
Opswise Limited
Company number
14620512
Registered in
England and Wales
Registered office
4th Floor, 86–90 Paul Street, London, EC2A 4NE
Contact
hello@opswise.co.uk
0203 907 6865
What we document

Assurance built around clear responsibilities.

The exact documents depend on the agreed service and procurement route. These are the areas we expect a school to examine and discuss with any managed IT provider.

01

Service scope and responsibility

Proposals distinguish included services, exclusions, service hours, escalation routes and the responsibilities that remain with the school or another supplier.

02

Service levels and reporting

Priority definitions, response targets, review meetings and useful measures are set out in the service schedule rather than left as informal expectations.

03

Security and data protection

Access, privileged administration, data-processing terms, incident escalation and relevant supplier information are considered during service design and contracting.

04

Safeguarding context

Technical decisions involving filtering, monitoring, identity and devices are considered alongside the responsibilities of DSLs, leaders and governors.

05

Transition and documentation

Discovery, access handover, estate records, priority risks and named owners form part of the proposed implementation approach.

06

Continuity and exit

Contract discussions can cover continuity arrangements, ownership of information, return of access and practical cooperation with an incoming provider.

Information schools can request.

We would rather answer due-diligence questions directly than rely on badges or broad assurances. Evidence is supplied where it exists and its relevance to the proposed service is explained.

Availability and final wording depend on scope and the agreed contract. No certification or partnership should be inferred unless it is explicitly evidenced.
  • Detailed service description and responsibility matrix
  • Service-level, priority and reporting schedule
  • Implementation, onboarding and handover plan
  • Data-processing terms and relevant supplier information
  • Incident escalation and business-continuity arrangements
  • Relevant insurance or certification evidence where applicable
  • Exit, access-return and documentation provisions
  • Named service ownership and governance route
How proposals are prepared

Pricing follows the required service, not a generic bundle.

A proposal explains the assumptions behind the scope so leaders can compare what is included, what is optional and what may remain with another supplier.

People, devices and sites

The number and type of users, devices, buildings and locations that need support.

Support model

Remote coverage, planned onsite time, service hours and the role of any internal IT team.

Current environment

Identity, cloud platforms, networks, filtering, backups, servers, devices and third-party services.

Risk and priorities

Known service issues, cyber risks, safeguarding dependencies, lifecycle pressures and required projects.

Transition effort

Access handover, discovery, documentation, tooling, remediation and coordination with the outgoing provider.

Contract assumptions

Agreed term, responsibilities, optional work, licensing and supplier costs are shown separately where relevant.

Independent checks

Useful questions for any IT provider.

Official guidance and our leadership checklist can support a more consistent comparison between suppliers.

12 questions to ask your IT provider NCSC supplier assurance questions DfE contract guidance for schools

This page is a general overview. A signed proposal, service agreement, data-processing agreement and service schedule take precedence.

Initial discussion

Request information for your due-diligence process.

Tell us what your school needs to assess and we will confirm what can be provided for the proposed service.

Request a review