The Safeguarding Checklist Every School Should Use Before Hiring an Online Tutoring Platform

Choosing an online tutoring partner is no longer just a buying decision. For UK schools, it is a safeguarding decision, a procurement decision, a data protection decision, and an inspection-evidence decision all at once. With online tuition now embedded in intervention strategy, governors and senior leaders need a repeatable audit process that tests whether a provider is safe, accountable, and operationally ready to work with children. This guide gives you a concrete, procurement-friendly safeguarding checklist you can use before contract award, during onboarding, and throughout delivery. For broader context on provider differences and safeguarding standards, it is worth reviewing our overview of the best online tutoring websites for UK schools and the logic behind certification-led vendor selection, which is increasingly relevant to education technology too.

Done well, a platform can strengthen outcomes, reduce teacher workload, and improve access to subject specialists. Done badly, it can create weak oversight, unclear reporting lines, data privacy risk, and safeguarding blind spots that governors will have to explain later. The safest schools treat vendor evaluation like a structured control environment, similar to how leaders approach vendor diligence for enterprise tools or API governance in regulated settings. The difference is that in education, the risk profile is human, not just technical.

Why safeguarding due diligence must come before price, promises, and glossy demos

Safeguarding failures are usually process failures

Most problems with online tutoring platforms do not begin with one catastrophic event. They start with vague ownership, weak onboarding, limited session visibility, or a school assuming the supplier has “standard checks” in place. If the school cannot evidence who checked what, when, and against which policy, the school cannot prove diligence to governors, inspectors, or parents. That is why your procurement pack should require documented controls, not marketing claims.

Senior leaders should remember that online tuition sits at the intersection of child protection, staff conduct, and third-party risk. A platform may have excellent pedagogy, but if it cannot show tutor verification, a clear escalation route, and secure data handling, it should not be shortlisted. This is similar in spirit to reviewing trust signals and responsible disclosures from hosting providers or using safe, auditable system design principles: trust is earned by evidence, not language.

Inspectors and governors want evidence, not reassurance

When safeguarding or curriculum leaders ask why a school chose a particular provider, they should be able to point to a documented decision trail. That trail should show that the school checked DBS arrangements, staff vetting, lesson monitoring, incident reporting, privacy and retention settings, and whether the platform supports the designated safeguarding lead (DSL) in practice. If a provider cannot support those questions with written policies, screenshots, sample logs, and named contacts, it is not procurement-ready.

For senior leaders, this means the buying process should generate inspection evidence as a by-product. Minutes, scoring sheets, and contract notes should all reinforce the same story: the school selected a platform because it met a defined safety standard, not because it was the cheapest or quickest to launch. That mindset mirrors the discipline behind analyst-led research workflows and structured audit frameworks, where the process itself is part of the outcome.

A practical rule for governors

Pro Tip: If a provider’s answer to any safeguarding question is “we can discuss that after contract signature,” treat it as a red flag. Safe procurement means the evidence comes before the invoice.

To keep the process disciplined, governors should ask for a shortlist comparison that includes operational controls, not just delivery features. If you are building a wider intervention strategy, you may also want to compare the platform against your existing provision using the type of decision logic found in total cost of ownership comparisons and membership-style service planning, because recurring tuition commitments can behave like long-term service subscriptions.

The pre-contract safeguarding checklist: the non-negotiables

1. Tutor vetting and DBS checks

Start with the basics: every tutor who may have live contact with pupils should have an identity check, a right-to-work or equivalent verification where applicable, and an appropriate DBS check that matches the nature of the engagement. Do not accept a vague statement that “all tutors are vetted.” Ask whether checks are enhanced, whether they are renewed or updated, and who validates the results. If the platform uses contractors or marketplace tutors, you need clarity on who is responsible for vetting and what happens when tutors move between schools.

This is especially important in mixed-delivery models where a platform may use a central tutor pool rather than a school-specific team. Schools should insist on written evidence of the vetting chain, including who reviewed the documents, what was checked, and how anomalies are escalated. If you need a reference point for what strong provider transparency looks like, review how some platforms communicate screening and school liaison in UK school tutoring comparisons.

2. Safer recruitment and conduct policies

DBS is not the finish line. A school should ask for the provider’s safer recruitment policy, code of conduct, and disciplinary process, including what happens when a tutor breaches communication rules or attempts to move contact outside the platform. Good providers should explain prohibited behaviours plainly: no private messaging with pupils, no unrecorded contact, no personal social media contact, and no off-platform arrangements unless explicitly authorised by the school.

This is where many schools underestimate risk. A tutor may be subject to identity checks and still create risk if conduct boundaries are weak or poorly enforced. Ask for the supplier’s training curriculum, safeguarding induction, refresh cycle, and evidence that tutors have read and accepted the policy. Procurement teams should score this section separately from teaching quality, because the best tutor in the world is not a safe choice if the platform cannot control communication boundaries.

3. Session visibility and monitoring

Schools should not buy blind. The platform should specify whether sessions are recorded, observed, transcripted, or sampled, and who can access those records. If recordings exist, ask how long they are retained, who can review them, and how the provider prevents unauthorised download or sharing. If no recording exists, ask what alternative monitoring is in place, such as live oversight, quality assurance sampling, or flagged-keyword review.

Session monitoring matters for both safeguarding and pedagogy. It helps resolve complaints, identify missed support, and detect concerning behaviour quickly. It also supports the school when evidence is needed for a concern, an internal review, or an external audit. Schools using digital services can borrow the same discipline as teams managing high-volume operational monitoring or ongoing workload controls: visibility is not optional.

4. DSL liaison and escalation routes

Every school needs a named safeguarding contact at the provider and a defined escalation pathway that mirrors the school’s own child protection process. The provider should state exactly how tutors report worries, who reviews them, what response timelines apply, and how the DSL is notified. Schools should also ask how the provider handles low-level concerns versus immediate risks, and whether reporting can happen in-platform or only by email.

The best providers integrate safeguarding reporting into everyday operations instead of making it an afterthought. They should be able to explain how they train tutors to recognise signs of distress, how they avoid making promises of confidentiality, and what they do if a pupil says something worrying during a live session. This is the sort of operating discipline you want in any supplier that handles children, just as you would expect from providers that publish crisis response protocols or emergency access plans.

5. Data privacy, retention, and lawful processing

Schools must understand what data the platform collects, why it collects it, where it is stored, and how long it is kept. The checklist should cover pupil names, email addresses, learning data, recordings, chat logs, performance analytics, and support tickets. Ask for the privacy notice, the data processing agreement, sub-processor list, breach notification process, and retention schedule. If the supplier cannot answer these quickly and clearly, they are not procurement-ready.

Data privacy is not just a legal requirement; it is a trust signal for families. Schools should verify whether the platform uses UK or EEA hosting, what safeguards apply to international transfers, and whether data is used to train AI systems or improve the product. This is the same careful evaluation mindset you would use when reviewing responsible AI disclosures or security and scope controls.

Build your vendor evaluation scorecard around control areas, not marketing claims

Create a weighted checklist with pass/fail thresholds

School procurement works best when the selection criteria are measurable. Instead of asking whether a platform feels “safe,” set weighted categories such as safeguarding, DBS and vetting, session monitoring, DSL liaison, data privacy, reporting, curriculum fit, and value for money. Require a pass mark for all safeguarding controls and a separate minimum score for educational impact and usability. This prevents a brilliant product demo from hiding a weak risk profile.

A simple scorecard also makes audit trails easier to defend. Governors can see why one vendor was preferred over another, and the DSL can see which controls were checked before rollout. If your school wants to improve procurement discipline beyond tutoring, consider the same structure used in enterprise vendor diligence and competitive intelligence workflows, where every claim is backed by evidence and weighted criteria.

Insist on proof, not promises

Ask every shortlisted provider to submit a standard evidence pack. That pack should include safeguarding policy excerpts, DBS process notes, tutor training materials, sample incident logs, recording/monitoring options, sub-processor information, and a named safeguarding lead. You should also ask for a live demo of the reporting dashboard, because reporting quality often determines whether school leaders can actually monitor delivery after launch.

One practical way to reduce selection bias is to score the evidence pack before taking the demo. That keeps the buying team focused on control design rather than presentation style. Schools that adopt this approach often discover that the most polished provider is not the safest one, and that a slightly less flashy vendor offers better reporting, clearer escalation routes, and more mature documentation.

Review implementation risk as part of procurement

A safe platform on paper can still become risky if implementation is rushed. Ask whether the provider has a dedicated onboarding process, how schools are configured, what training is given to staff and tutors, and how incidents are handled in the first term. The right vendor should be able to explain its implementation checkpoints, named contacts, and escalation timeline. If not, your procurement may be buying future chaos.

For schools managing multiple interventions at once, procurement should also check whether the platform aligns with wider resourcing plans. Some schools use online tuition as a stopgap, others as a long-term intervention tool. Understanding these patterns is similar to evaluating budget trade-offs or reading cost-per-use arguments: short-term savings can hide long-term complexity.

What strong session monitoring should look like in practice

Live oversight, recorded evidence, and complaint resolution

Monitoring should do three jobs: protect pupils, support quality, and preserve evidence. The best platforms offer at least one of the following: live observation by a supervisor, recording with retention controls, or robust QA sampling. Schools should ask how often sessions are checked, whether sessions can be flagged for review, and whether a pattern of concern triggers tutor suspension.

There should also be a clean way to reconstruct what happened if there is a complaint or concern. That means time-stamped notes, access logs, tutor identity traceability, and the ability to export relevant records securely. Without those features, a school can struggle to investigate issues properly, especially if a parent or pupil raises a concern after the fact.

Behaviour boundaries and pupil wellbeing

Session monitoring is not just about misconduct. It also helps the school notice pupil disengagement, emotional distress, or signs that a learner is being left behind. In an online environment, a withdrawn pupil may still appear “present” while effectively shutting down. A good tutor platform should encourage tutors to escalate concerns when a pupil becomes unusually quiet, agitated, or preoccupied.

Ask the vendor how they train tutors to manage safeguarding and wellbeing boundaries in real time. This is especially important in GCSE and A level tuition, where exam stress can surface as avoidance, irritability, or hopelessness. If the provider cannot explain how those situations are handled, the school should treat that gap as a risk, not a minor omission.

Why monitoring should be part of the contract

Do not leave monitoring as a verbal assurance. It should be explicitly described in the contract or service schedule, including the monitoring method, the provider’s responsibilities, and the school’s reporting rights. If a provider later changes the process, the school should have a route to challenge or approve that change. That contractual clarity is as important as the educational promise itself.

Schools that want a useful benchmark for structured oversight may find it helpful to compare this with how other sectors manage continuous quality control and audit readiness. Even outside education, teams working on risk monitoring dashboards or auditable systems treat monitoring as a core control, not an optional extra.

A procurement checklist governors and senior leaders can actually use

Before you shortlist providers

Before inviting demos, define the non-negotiables in writing. These should include DBS requirements, safeguarding policy standards, data privacy controls, incident reporting timelines, session monitoring options, and DSL liaison. Then decide which items are absolute pass/fail criteria and which are scored. This prevents the panel from drifting into vague preferences or being swayed by price alone.

At this stage, it helps to compare the provider landscape through a school leadership lens, not a consumer lens. For example, a flexible marketplace may work for some uses, while a tightly managed school partnership platform may be safer for others. To understand the market shape better, compare different provider models in our guide to the best online tutoring websites and, if relevant to your intervention mix, look at how schools evaluate access, turnaround, and scale in structured migration checklists.

During the due-diligence review

Ask for evidence in a standard format and require named owners for every control. Who verifies DBS? Who reviews incidents? Who trains tutors? Who owns data protection? Who reports to the school? When every answer has a named role and a turnaround time, the school is moving from “supplier relationship” to “managed control environment.” That is exactly where you want to be.

This phase should also include references from existing school customers, preferably from settings similar to yours. A primary school, an MAT, and a selective secondary may have different risk thresholds. Request examples of how the provider handled safeguarding concerns, not just how many pupils they tutored. Good references are operational, not promotional.

After contract award

Do not assume procurement ends at signature. Create a 30-day and 90-day review schedule that checks whether the school’s named contacts are live, whether tutors have been onboarded correctly, whether reporting works, and whether any safeguarding incidents have been escalated appropriately. Keep minutes and action logs for governors. That creates a clean audit trail if questions arise later.

This post-award discipline is where many schools win or lose confidence in a supplier. If the platform needs extra controls, add them early. If the implementation is messy, slow the rollout until the issues are fixed. Schools that are systematic at this stage avoid the common trap of “we invested in the tool, so now we have to make it work,” which is never a good safeguarding principle.

Comparison table: what to check, what good looks like, and what should worry you

How to turn the checklist into inspection evidence

Keep the decision trail together

When leaders inspect the paper trail after a launch, they should be able to tell the story in five minutes: what the school needed, what risks were identified, what evidence was reviewed, why the chosen vendor was selected, and how the school will monitor it. Keep meeting notes, scoring sheets, policy copies, and contract schedules in one place. If you cannot assemble that story quickly, your evidence trail is too fragmented.

That kind of documentation also protects governors. If challenged, they can show that due diligence was systematic and proportionate. It demonstrates that the school was not merely purchasing tuition hours, but actively managing a child-facing service. That is the standard schools should aim for, especially where online provision is delivered at scale.

Use the checklist as a living control document

The checklist should not be a one-off due diligence tool. It should be revisited whenever there is a tutor pool change, a new subject added, a platform update, or a concern raised. Schools can also use it in annual contract reviews to decide whether to renew, renegotiate, or exit. That turns procurement into governance rather than administration.

If your school wants to improve its wider supplier governance, it may help to borrow the same continuous-review mindset used in resource monitoring and crisis readiness planning. The message is simple: safe services are maintained, not assumed.

What to do if a provider fails the checklist

If a provider fails on a non-negotiable, do not improvise a workaround unless the risk can be genuinely controlled and documented. Ask whether the provider can remediate before launch, whether the contract can include clear remedies, or whether the school should move to another supplier. For high-risk gaps, the safest choice is often to walk away. That is not over-cautious; it is good governance.

In practice, the strongest schools hold the line. They understand that the wrong provider can create more workload, more anxiety, and more reputation risk than no provider at all. The purpose of the checklist is to make that decision clear, defensible, and repeatable.

Final recommendations for governors and senior leaders

Make safeguarding the first gate, not the final checkbox

A school should never discover safeguarding weaknesses after the first lesson. The due-diligence stage is where the difficult questions belong, because it is the cheapest and safest time to change course. Build the checklist into procurement from day one, and make sure the DSL is part of the selection panel or formal review process.

When schools use online tutoring well, they gain flexibility, access, and impact. When they use it poorly, they inherit avoidable risk. The difference is usually not the platform category itself; it is the discipline of vendor evaluation.

Adopt a “show me” culture

In meetings with suppliers, replace general questions like “Are you safe?” with specific ones: “Show us your DBS workflow.” “Show us how a concern is escalated.” “Show us the retention period for session data.” “Show us the named safeguarding lead.” This protects schools from persuasive but empty sales language and gives leaders the evidence they need.

It also creates better conversations with parents and staff. If the school can explain the platform in concrete terms, trust improves. That trust is the real outcome of a good safeguarding checklist.

Use the checklist to drive continuous improvement

Review your provider annually, not only at renewal. Check whether controls still match the school’s needs, whether incidents were handled well, and whether data practices changed. Over time, this gives governors a meaningful record of oversight and a clearer basis for future procurement decisions.

Bottom line: the safest online tutoring platform is not necessarily the cheapest, fastest, or most famous. It is the one that can prove its DBS checks, monitoring, DSL liaison, privacy controls, and reporting are robust enough for your pupils and your governance expectations.

FAQ

Related Reading

• 7 Best Online Tutoring Websites For UK Schools: 2026 - Compare tutoring models, safeguarding standards, and value for money before you shortlist providers.
• Vendor Diligence Playbook: Evaluating eSign and Scanning Providers for Enterprise Risk - A useful framework for structured supplier due diligence and evidence collection.
• API governance for healthcare: versioning, scopes, and security patterns that scale - See how regulated industries document security controls and accountability.
• Specifying Safe, Auditable AI Agents: A Practical Guide for Engineering Teams - Learn how auditability and safety controls are built into digital systems.
• Trust Signals: How Hosting Providers Should Publish Responsible AI Disclosures - A helpful lens for evaluating transparency, privacy, and vendor trust.