Automated SAR Processing Built for Schools

Designed specifically for UK schools and multi-academy trusts, we automate the entire SAR process, from identity verification through to secure delivery - ensuring GDPR compliance, safeguarding alignment and complete audit oversight without placing additional burden on teaching or administrative staff.

30 days
15 minutes
95% reduction in SAR processing time
GDPR compliant
Secure, encrypted data handling

About

Advanced Automation

Robust Security

Saves Time & Money

Eliminates Compliance Risk

Schools across the UK are overwhelmed by manual SAR processes that consume hours of staff time and create unnecessary compliance pressure. Headteachers, DPOs and school business managers are forced to coordinate emails, MIS records, safeguarding logs and CCTV footage manually - often under tight ICO deadlines.

Fisar transforms this process. Our platform connects directly to your school systems, automatically aggregates relevant data, removes duplication, assists with redaction and delivers completed SAR packs securely.
What used to take 20–30 hours per request becomes a structured, compliant workflow completed in minutes.

Integrates with:

The School

SAR Challenge

  • Why SARs Create Pressure
    in Schools

    Subject Access Requests are uniquely challenging in school environments. Data exists across multiple systems, safeguarding considerations must be handled carefully and staff time is limited. Manual fulfilment introduces risk, disruption and stress.

    Manual Data Collection

    School staff spend 20–30 hours per request searching MIS platforms, email accounts, safeguarding systems and archived records.

    Safeguarding Sensitivity

    Requests often involve pupil records, behavioural logs or safeguarding notes requiring careful review and redaction.

    Operational Disruption

    Teachers and administrators are pulled away from their core educational responsibilities to manage compliance tasks.

    Compliance & ICO Risk

    Missing deadlines or disclosing incomplete or incorrectly redacted information can expose schools to regulatory scrutiny.

Our Process

Four Stages. Fully Compliant.

Fisar guides schools through a structured, compliant process that aligns with ICO guidance and safeguarding expectations.

01

Setup &

& Integration

Quick Onboarding
Connect Your Systems
Secure Setup
MIS, Email, CCTV
Setup in Under an Hour
  • After signing up, you'll receive access to your secure Fisar account. We'll guide you through connecting your existing systems with simple instructions for finding the necessary information from your MIS, email servers and CCTV storage. Most schools complete this step in under an hour. Once you've provided the connection details, our team handles all technical integration work - this typically takes 24-48 hours on our side with no further input required from you.

02

SAR Request

Intake

Portal Submission
Auto Log & Acknowledge
Tracked from Day One
Reference Assigned
Deadline Safe
  • Subject Access Requests are submitted directly through your school's dedicated web portal. The system automatically logs each request, assigns a reference number and sends immediate acknowledgement to the requester. No more lost requests or forgotten deadlines - everything is tracked from day one.

03

Date Collection

& Identity Verification

Secure ID Check
One‑Click Aggregation
Pull from All Systems
MIS, Email, CCTV Sync
Data Collection in Minutes
  • Fisar automatically emails the requester a secure link to upload identification documents. Meanwhile, your DPO can trigger the automated data aggregation with a single click. Fisar connects to all your integrated systems simultaneously - pulling student records from your MIS, searching email archives, accessing CCTV footage and gathering any other relevant data sources.

04

Review &

Secure Delivery

Quick Onboarding
Connect Your Systems
Pull from All Systems
MIS, Email, CCTV Sync
Data Collection in Minutes
  • All collected documents are processed through our AI-powered redaction system to automatically remove personal information that shouldn't be shared. You're then provided with a completed pack that can be reviewed and manually adjusted if needed. Following approval, Fisar sends everything using a secure, encrypted package to the requester via email and marks it complete with a full audit trail.

01

Setup &

& Integration

Quick Onboarding
Connect Your Systems
Secure Setup
MIS, Email, CCTV
Setup in Under an Hour
  • After signing up, you'll receive access to your secure Fisar account. We'll guide you through connecting your existing systems with simple instructions for finding the necessary information from your MIS, email servers and CCTV storage. Most schools complete this step in under an hour. Once you've provided the connection details, our team handles all technical integration work - this typically takes 24-48 hours on our side with no further input required from you.

02

SAR Request

Intake

Portal Submission
Auto Log & Acknowledge
Tracked from Day One
Reference Assigned
Deadline Safe
  • Subject Access Requests are submitted directly through your school's dedicated web portal. The system automatically logs each request, assigns a reference number and sends immediate acknowledgement to the requester. No more lost requests or forgotten deadlines - everything is tracked from day one.

03

Date Collection

& Identity Verification

Secure ID Check
One‑Click Aggregation
Pull from All Systems
MIS, Email, CCTV Sync
Data Collection in Minutes
  • Fisar automatically emails the requester a secure link to upload identification documents. Meanwhile, your DPO can trigger the automated data aggregation with a single click. Fisar connects to all your integrated systems simultaneously - pulling student records from your MIS, searching email archives, accessing CCTV footage and gathering any other relevant data sources.

04

Review &

Secure Delivery

Quick Onboarding
Connect Your Systems
Pull from All Systems
MIS, Email, CCTV Sync
Data Collection in Minutes
  • All collected documents are processed through our AI-powered redaction system to automatically remove personal information that shouldn't be shared. You're then provided with a completed pack that can be reviewed and manually adjusted if needed. Following approval, Fisar sends everything using a secure, encrypted package to the requester via email and marks it complete with a full audit trail.

Pricing

Simple, transparent pricing

An annual licence sized to your organisation — from specialist schools through trusts, colleges and beyond. Generous processing built in, and the freedom to top up anytime.

Your plan is set by the kind of organisation you are — choose the one that fits, not the biggest number. The processing allowance is included; if you ever need more, you can top up anytime.

How we estimate SARs

“≈ SARs” figures assume a standard SAR of about 10GB and are rounded down — large or long-history requests can use more.

Annual licence

One simple yearly fee per organisation, billed annually (+VAT). No per-request charges.

Includes processing (GB)

Every plan includes a processing allowance, measured in GB, with comfortable headroom above expected demand.

Top up anytime

Add more whenever you need it. The allowance resets each year — it doesn't roll over.

What a standard request really uses

A SAR uses processing based on the volume of emails, files, messages and attachments gathered for that person across the relevant period. We size everything around a standard request of about 10GB — a figure from our own internal research into real Subject Access Requests — and most land close to it.

It's an average, not a cap. If someone has a long history with your organisation, their request can hold far more data — sometimes well beyond 10GB — and use more of your allowance. That's completely normal. Your dashboard always shows what's left and warns you before you run low, and you can top up anytime, so a request is never blocked unexpectedly.

Top-ups

Flat £10 per GB, added to your current year's allowance — no surprises.

Top-up Adds Roughly

All prices are exclusive of VAT.

Ready to Transform Your SAR Process?

Book a Call

FAQ

Everything you need to learn about Fisar

Common questions about our platform, security measures and how we help schools manage Subject Access Requests efficiently and compliantly.

Show More
  • 01

    What problem does Fisar solve for schools?

    Schools typically spend 20-30 hours processing each SAR manually, pulling teachers and administrators away from teaching and operational duties and creating pressure around ICO deadlines. Fisar removes this burden through intelligent automation, so staff can focus on education rather than paperwork.

  • 01

    Which school systems does Fisar integrate with?

    Fisar connects with major MIS and safeguarding platforms used in education, including Bromcom, Integris and CPOMS, as well as Microsoft 365 and Google Workspace for email, files and messages. Additional school systems can be added on request.

  • 01

    How quickly can a school go live?

    Most schools are operational within 1-2 weeks but the process can be completed quicker if necessary. Fisar manages the technical setup and provides clear onboarding so staff can begin using the platform almost immediately.

  • 01

    Is Fisar aligned with DfE and GDPR requirements?

    Yes. Fisar is designed to meet UK GDPR obligations and to align with DfE digital and safeguarding standards. The platform provides encrypted storage, per-school data isolation and full audit trails.

  • 01

    How is third-party pupil information protected in a disclosure?

    When a document references a pupil other than the data subject, Fisar's AI identifies that third party and redacts their information before disclosure. Your DPO reviews the redacted files before anything is released, helping you avoid disclosing information about other pupils.

  • 01

    How does Fisar identify the correct pupil?

    Fisar verifies identity using the records and metadata from your connected school systems, and separates exact matches from partial ones using confidence scoring. Where a pupil is not present in a connected system, your DPO verifies identity manually before the SAR proceeds.

  • 01

    Can multi-academy trusts use Fisar across multiple schools?

    Yes. Fisar supports MAT structures with secure data separation for each school while allowing central oversight where appropriate, giving trusts trust-wide visibility of SAR volumes and compliance.