Safeguarding & Child Protection Statement

Safeguarding & Child Protection Statement

Last reviewed 6 November 2026

CimotaTech Ltd / Handwriting HorizonsAt CimotaTech Ltd, the safety, security, and wellbeing of pupils are central to our product design, engineering, and operational practices. Although CimotaTech operates as a remote cloud technology and software infrastructure provider and does not provide direct, unsupervised physical contact with pupils, we maintain a zero-tolerance approach to safeguarding risks.This statement outlines our compliance with key UK safeguarding frameworks, including Keeping Children Safe in Education (KCSIE) and the Working Together to Safeguard Children statutory guidance.

1. Safer Recruitment & DBS Verification

While our software is delivered remotely, any CimotaTech staff, engineers, or educational specialists who may participate in direct school workshops (such as Hour of Code or Hour of AI sessions) or hold administrative database access are subject to strict vetting procedures:

  • Enhanced DBS Checks: All customer-facing staff and system engineers with access to backend databases hold active, Enhanced Disclosure and Barring Service (DBS) checks.
  • Vetting Standards: Our recruitment process includes independent identity verification, professional reference checks, and mandatory training on data privacy and child protection.

2. Privacy-by-Design Safeguarding Architecture

Handwriting Horizons is intentionally engineered to eliminate common digital safeguarding vulnerabilities:

  • No Unmonitored Communication: The platform contains zero peer-to-peer messaging, social feeds, public user profiles, or open chat features. Pupils cannot communicate with other users, preventing any risk of online grooming, cyberbullying, or inappropriate content sharing within the software.
  • No External Content Injection: The platform is a closed ecosystem. It contains no external third-party advertising, external hyperlinks, or embedded video streams from unverified sources.
  • Anonymized & Minimal Data Exposure: Pupil accounts are authenticated securely via school Single Sign-On (SSO) interfaces (Google Workspace, Microsoft Entra ID, or Hwb). Teachers and school leads manage pupil display configurations, minimizing unnecessary data exposure.
  • Anti-Stigmatization (SEND Privacy): While the platform processes specific Special Educational Needs (SEND) data to automatically tailor the biomechanical UI for individual learners, these indicators are strictly hidden on the pupil-facing interface. A child's customized learning environment is completely invisible to their peers, eliminating any risk of stigmatization or bullying regarding their educational or physical needs.

3. Incident Management & Reporting Protocol

If a potential technical vulnerability, data integrity concern, or safeguarding issue is identified:

  1. Immediate Isolation: Our cloud infrastructure allows security administrators to isolate compromised tenant environments or user sessions instantly without exposing other schools or MAT data.
  2. Notification: In the event of an incident involving potential data exposure or misuse impacting a pupil, the contracting school’s Designated Safeguarding Lead (DSL) and Data Protection Officer (DPO) will be notified within 24 hours.
  3. Cooperation: CimotaTech will fully cooperate with school leadership, Local Authority Designated Officers (LADO), and relevant UK law enforcement authorities during any official investigation.

4. Contact & Escalation

For safeguarding inquiries, security disclosures, or to verify staff vetting credentials:

  • Safeguarding & Compliance Lead: compliance@cimotatech.com
  • Registered Office: CimotaTech Ltd, Unit F1 Intec, Parc Menai, Bangor, Gwynedd, LL57 4FG