OAK TRAINING

Digital Learning Platform
Secure Web-Based Platform Proposal
Prepared for: Oak Training | Confidential | May 2026
Believe in Achievement

Table of Contents

  1. Executive Summary
  2. Client Background and Current Challenges
  3. Proposed Solution
  4. Key Features
  5. UI/UX Design Philosophy
  6. Technical Approach
  7. Implementation Roadmap
  8. Compliance, Safeguarding and Risk Management
  9. About the Development Approach
  10. Next Steps

1. Executive Summary

Oak Training has delivered intensive alternative provision programmes for over fifteen years, supporting Key Stage 4 students aged fourteen to sixteen who have struggled within mainstream education. Based in Blyth, Northumberland, the organisation currently relies on a Windows Server infrastructure and a PowerPoint-centric delivery model. While the idea for this platform was sparked by the potential of iPad-based learning, the immediate priorities are improving student engagement, reducing administrative overhead, and delivering a purpose-built digital experience that genuinely serves Oak Training's students. This proposal delivers exactly that.

The platform centres on a purpose-built, touch-optimised slide and presentation builder that replaces Microsoft PowerPoint for both teachers and students — fully optimised for touch-screen delivery with large tap targets, auto-save, resilience to poor connectivity, and a full-screen display mode. Built on proven, industry-standard technology, the platform is delivered as a Progressive Web App, meaning it handles poor or absent connectivity gracefully. The platform is designed and built to be aligned with UK GDPR (the UK General Data Protection Regulation — the UK’s primary data protection law governing how personal data must be handled, derived from EU GDPR following Brexit), KCSIE 2025 (Keeping Children Safe in Education — the statutory government guidance that all schools and alternative provision settings must follow to safeguard children), the Online Safety Act 2023, and the ICO (Information Commissioner’s Office — the UK’s independent authority for data protection and privacy) Children’s Code is embedded in every layer of the platform.

Delivery follows a three-phase roadmap: MVP pilot (months 1–3), full rollout (months 4–6), and enhancements including a native mobile application (months 7–12). Each phase is independently scoped and risk-managed, enabling Oak Training to validate the platform with a single cohort before any wider commitment.

2. Client Background and Current Challenges

Oak Training runs five-to-ten-day intensive programmes for disengaged and excluded young people aged fourteen to sixteen, many of whom are pupil premium recipients. Qualifications delivered include BTEC (Business and Technology Education Council — a vocational qualification provider widely used in further and alternative education) Enterprise and Sport, GCSE Art and Photography, Functional Skills in English and Maths, IT Skills, and First Aid. The organisation’s motto, "Believe in Achievement", reflects a deeply held philosophy that every young person is capable of meaningful growth given the right environment and tools.

The current technology stack presents several challenges that this platform is designed to address:

3. Proposed Solution

A purpose-built platform tailored to Oak Training’s pedagogical model, student population, and hosting environment is preferable to adapting a generic LMS (Learning Management System — software designed to deliver and track educational courses) such as Moodle or Google Classroom. Off-the-shelf platforms carry configuration complexity and feature bloat that is actively unsuited to Oak Training’s lean, intensive delivery model. A bespoke platform can be designed from first principles around the actual workflows of Oak Training’s teachers and the real needs of its students.

The Custom Slide Builder: Replacing PowerPoint

The centrepiece of the platform is a custom slide and presentation builder powered by a purpose-built HTML5 canvas engine. It is fully touch-optimised for iPad delivery and eliminates any dependency on Microsoft licensing or hardware.

  • Left-hand slide thumbnail panel with drag-to-reorder and active slide highlight
  • Contextual toolbar adapting dynamically to the selected element: font controls for text, crop and opacity for images, colour for shapes
  • Floating creation toolbar: Text, Draw, Shape, Image, and Add Slide, all with 48px minimum tap targets
  • Auto-save every 30 seconds with a visible pulsing indicator and version history — no work is ever lost, and students can step back through previous versions to undo a mistake
  • Full-screen presentation mode: the student presents their work to the class, replacing the teacher-driven model
  • Structured canvas storage for efficient retrieval; the web platform handles temporary connectivity drops gracefully, with the native app (Phase 2) extending this to true offline-first storage
  • Any unsynced edits are queued locally and replayed automatically when the connection is re-established

The platform is built on proven, industry-standard technology: a modern JavaScript framework for the student-facing web application; a secure server-side API managing all data and authentication; and a UK-based relational database storing all student work. The hosting environment is UK-based shared hosting with full SSL encryption. Optional content delivery network (CDN — a global network of servers that delivers web content from locations close to the user for faster loading) integration adds edge caching and DDoS (Distributed Denial of Service — a cyberattack that floods a server with traffic to make it unavailable) protection at no additional infrastructure cost.

4. Key Features

Phase 1: MVP Features

Phase 2: Enhancement Features

5. UI/UX Design Philosophy

Designing for disengaged, vulnerable teenagers demands the opposite of feature-richness. Every additional option, button, or competing piece of information is a potential trigger for the anxiety and shutdown that characterises many of Oak Training’s students’ relationship with technology. The guiding principle is extreme simplicity: never more than three or four meaningful actions visible at once, never a layout requiring more than one decision to reach the primary task.

Touch-first design is non-negotiable on iPads. Every interactive element meets the 48px minimum tap target from Apple’s Human Interface Guidelines and WCAG (Web Content Accessibility Guidelines — the internationally recognised standard for making digital content accessible to people with disabilities). The colour palette is chosen deliberately: primary greens communicate growth, safety, and calm, aligned with trauma-informed practice. Accent gold provides warmth and positive celebration without stress-inducing urgency. Copy throughout is friendly, non-judgmental, and affirming. Error messages are kind and solution-oriented. There are no comparative scoring mechanisms, leaderboards, or peer ranking of any kind by default.

Managed iPad Deployment and Kiosk Mode

For a structured classroom environment with potentially challenging students, the platform is fully compatible with Apple School Manager (ASM) combined with a Mobile Device Management solution such as Jamf, Mosyle, or Microsoft Intune. Enabling Autonomous Single App Mode (ASAM) locks each iPad to the Oak Training platform for the duration of a session: students cannot switch to social media, games, or any other application without staff unlocking the device. The MDM profile is pushed to all devices silently, requiring no action from students. This gives Oak Training full control over the device environment and means the platform can be deployed with confidence even with students who would otherwise find ways to go off-task. No changes to the platform itself are required; kiosk mode is a device-level configuration managed entirely through the chosen MDM console.

The Teacher-Assigned Module Model

The primary student journey begins with a teacher assigning a module or task — not with a student creating freely from a blank canvas. When a student logs in, their assigned work is waiting for them: a clear task brief, a structured template, and a defined goal. This mirrors Oak Training’s existing pedagogical model and removes the anxiety of an empty page. The student opens their assignment, works through the slide template at their own pace, and submits when complete. Teachers manage assignments from a prominent “Assign Module” button in their dashboard, targeting individual students or an entire cohort. This structured approach keeps sessions focused and ensures every student knows exactly what they are working on from the moment they sit down.

Achievements & Learning Streaks: Design

The gamification layer is woven into the visual fabric of the student experience without overwhelming it. The daily streak counter, a flame icon with a number and a short motivational label such as ‘3-day streak! Keep going!’, sits prominently on the dashboard immediately below the personalised greeting. The XP bar uses a smooth animated fill that provides a visceral sense of forward movement. Achievement badges appear as gold-accented icons in a horizontal scrollable row; each new badge triggers a brief full-screen celebratory animation before returning the student to their work. The weekly top achiever recognition (when enabled by the teacher) shows only first names or usernames, never scores, and is framed as ‘Great work from Jordan this week!’ rather than a ranked table.

Screen Mockup Descriptions

Mockup 1: Login Screen

A clean white card centred on a dark green background with subtle decorative leaf shapes. The Oak Training SVG icon above the wordmark. A username field and password field, each 48px tall with 18px text. Helper text reads ‘Ask your teacher for your username.’ A full-width green Sign In button. No registration link, no social login. Demo quick-access buttons (Student / Teacher / Admin) allow a presenter to demonstrate role-switching with a single tap.

Mockup 2: Student Dashboard

Personalised greeting in Playfair Display. A circular animated course progress indicator. Daily streak flame counter. Achievement badge row. A daily mood check-in bar (emoji row: 😊 🙂 😐 😔) invites the student to indicate how they are feeling — voluntary and non-judgmental. A prominent “Talk to Someone” button provides persistent access to the concern-reporting mechanism. Four-tab bottom navigation: Home, My Work, Create, Help.

Mockup 3: Slide Builder

Landscape orientation. Left thumbnail panel with active slide highlighted in green and drag-to-reorder. Central canvas (70% screen width) with subtle drop shadow. Contextual toolbar at the top of the canvas adapts dynamically to the selected element: font controls for text, crop and opacity for images, colour for shapes. Floating creation toolbar (Text, Draw, Shape, Image) above the canvas. Auto-save pulsing indicator. Full-screen presentation mode and Share button top-right. A persistent “Talk to Someone” button sits in the top bar for safeguarding access at all times.

Mockup 4: Portfolio Workspace

Masonry grid of project cards showing first-slide thumbnail, title, status badge (green Complete or amber In Progress), and last-modified date. Gold + New Project button top-right. Horizontal filter row for status and subject. Speech bubble icon on cards with pending teacher feedback. Affirming language throughout: Your Work, Your Portfolio.

Mockup 5: Teacher Dashboard

Split-panel. Left: live activity feed showing username, status (Working, Idle, or Flagged in green/grey/amber), and last-action timestamp. Right: live read-only preview of selected student’s work, summary stat bar (Students Active, Projects Completed Today, Pending Feedback), and inline Send Feedback button. Red safeguarding alert counter badge on top navigation.

Mockup 6: Project with Teacher Feedback

Two-thirds canvas (read-only paginated view) and one-third feedback thread panel. Gold-bordered comment cards with role label, timestamp, and feedback text. Response input field at bottom of right panel. Breadcrumb navigation: My Portfolio / Project Name / Feedback. Warm, conversational visual treatment.

Mockup 7: Admin Dashboard

Persistent left sidebar: Users, Courses, Security, Settings, Audit Log with pending-action badges. Main area: four platform health metrics (Active Users, Storage Used, Open Safeguarding Alerts, Pending Feedback). Paginated user management table with Edit, Suspend, Delete actions (Delete requires MFA). Audit Log widget showing ten most recent actions with filter controls.

Mockup 8: iPad Landscape View

iPad hardware frame in landscape orientation showing the platform as it appears on an older iPad. A clean two-column layout: summary and navigation on the left, active content on the right. Touch-friendly navigation row at the base. All interactive elements 48px or larger. Includes Login, Teacher View, and Present shortcuts for demo purposes.

Mockup 9: Avatar Builder

Students personalise their profile avatar: choose from multiple skin tones, hair colours, hair styles, eye colours, face shapes, and gender presentation. Large preview of the current avatar sits centred at the top of the screen. Option panels are arranged in a horizontally scrollable row of category tabs beneath. All selections update the avatar preview instantly with a smooth transition. Saved choices persist across sessions and the avatar appears in the navigation bar across all student screens as a personalised identifier.

Mockup 10: Theme Picker

Students choose from four colour themes — Classic Oak (the default greens and gold), Midnight Indigo, Minimal Slate, and Calm Violet — that apply across all their screens. Each theme is presented as a large swatch card showing sample colours for background, primary, and accent. Selecting a theme updates the interface instantly as a live preview. This is presented as an exploratory concept at this stage; the final set of themes and whether this feature is included in the MVP will be confirmed following the discovery workshop.

6. Technical Approach

Student-Facing Application

The platform is built using a modern, industry-standard JavaScript framework chosen specifically for its ability to deliver a fast, responsive experience on older hardware — including ageing iPads — without requiring an app download. The slide and presentation builder is powered by an HTML5 canvas editor, giving students a genuinely creative, touch-friendly workspace that feels nothing like traditional school software. The platform functions as a Progressive Web App (PWA), meaning it continues to work even when the internet connection drops and synchronises student work when the connection is re-established.

Modular, Extensible Design

The platform is deliberately built in self-contained modules. Each learning tool — the slide builder, the portfolio workspace, the feedback system — operates independently and can be updated, replaced, or extended without affecting the rest of the platform. New tools or modules can be added at any point in the future without rebuilding from scratch. A feature flag system means the admin can switch individual tools on or off per cohort, directly from the admin dashboard, without any developer involvement. This future-proofs Oak Training’s investment and keeps the platform growing alongside the organisation.

Security and Data Protection

All data in transit is protected by industry-standard SSL encryption; all sensitive data at rest is encrypted using established encryption standards. File uploads pass through a multi-stage validation pipeline before being stored or displayed. Student sessions time out automatically after a defined period of inactivity. The admin dashboard is accessible only from trusted, pre-approved networks. The tamper-evident audit log is enforced at the database level, meaning no software — including the platform itself — can alter or delete existing records. Authentication is rate-limited to prevent brute-force attempts, and all login events are recorded.

Hosting and Infrastructure

The platform is designed to run comfortably on UK-based shared hosting infrastructure, keeping ongoing costs low and data residency entirely within the United Kingdom. All data remains on UK servers at all times; no personal data is transferred internationally. The platform is optimised for performance within the constraints of a shared hosting environment, with aggressive caching and lightweight asset delivery ensuring fast load times even for students on slower connections or older devices. Optional content delivery network (CDN) integration can be introduced at any point to further improve performance as usage scales.

Future Native Mobile Application

The web platform is built from the outset with a future native mobile application in mind. The approach taken means that the majority of the platform’s business logic, data handling, and design system can be carried across directly into a native iOS and Android application when Oak Training is ready to take that step. The slide builder will initially run within the native app as an embedded web view, preserving full functionality on both platforms without rebuilding it from scratch. This protects Oak Training’s investment and avoids having to maintain two entirely separate codebases.

7. Implementation Roadmap

The platform is delivered using efficient modern tooling and structured development practices, enabling a compressed timeline without any reduction in code quality, security rigour, or compliance standards. Every milestone is independently reviewable on the staging environment before the next sprint begins, giving Oak Training full visibility and confidence at each step. This approach allows us to move from contract to a working, testable web platform in three months, and to enhancements — including the native mobile application — within a further two months.

Phase 1: Full Web Platform (Weeks 1–12 — 3 Months)

By the end of Week 12, the complete web platform is deployed, tested, and ready for a live pilot with the first student cohort.

WeekMilestone
Week 1Project setup: secure API and database foundations established (user accounts, courses, projects, slides, audit log, feature flags). Private code repository initialised. Staging environment live on hosting.
Week 2Student dashboard (personalised greeting, XP bar, streak counter, achievement badges, action buttons, bottom navigation). Teacher dashboard shell. Oak Training branding applied throughout. Both views fully responsive for iPad.
Week 3HTML5 canvas slide editor integrated: touch event handling, slide thumbnail panel, contextual toolbar adapting to selected element (text, image, shape). 48px minimum tap targets throughout.
Week 4Slide builder completion: floating creation toolbar (Text, Draw, Shape, Image, Add Slide), auto-save every 30 seconds with pulsing indicator and version history, full-screen display mode, structured canvas storage, drag-to-reorder slides.
Week 5Portfolio workspace: masonry grid of project cards, status badges, New Project flow, filter controls. Teacher feedback surfaced inline with speech bubble indicators. File upload pipeline with MIME validation, size check, and extension verification.
Week 6Teacher dashboard complete: live student activity feed, live read-only work preview, inline Send Feedback, safeguarding alert badge. Teacher-to-student feedback thread view. Email notification on new feedback.
Week 7Admin dashboard: sidebar navigation, platform health metrics, paginated user management table, feature flag controls per cohort, IP whitelist management, mandatory MFA for destructive operations.
Week 8Content filtering and safeguarding: keyword scanning on all student-submitted text, immediate DSL alert on match, virus scanning for all uploads, image content moderation, URL stripping server-side. Full audit log with append-only enforcement.
Week 9Gamification layer: daily login streaks with streak-shield protection, XP bar with animated fill, achievement badge system (slide deck complete, project submitted, word count milestones), badge unlock animation. Avatar builder and optional theme picker.
Week 10PWA connectivity resilience: service worker caching of the application shell and static assets, local work queue for unsynced edits, connectivity-triggered sync replay (tested for Safari iOS compatibility), network status indicator. GDPR right-to-erasure workflow (with safeguarding record hold). Data retention automation. Session timeout and countdown warnings.
Week 11User Acceptance Testing (UAT) with Oak Training teaching staff. iPad performance profiling: lazy loading, image compression, canvas performance optimisation. Bug fixes and feedback incorporation from UAT sessions.
Week 12Staging-to-production deployment. Final security review: security headers audit, rate limiting verification, session management check. Staff onboarding documentation and safeguarding lead briefing. Pilot launch with first student cohort.

Phase 2: Native App & Enhancements (Weeks 13–20 — 2 Months)

Phase 2 focuses primarily on the native mobile application for iOS and Android, alongside analytics, reporting, and qualification tracking. The web platform remains live and in active use throughout this phase.

WeekMilestone
Week 13Native mobile app project setup (iOS and Android). Business logic, API integration, and design system carried across from the web platform; native UI components built for each platform. Core navigation and authentication flow completed.
Week 14Native student dashboard, portfolio workspace, and project view. Camera-based work upload with on-device image optimisation. Full offline sync using on-device storage, consistent with the web platform approach.
Week 15Slide builder integrated within the native app via an embedded web view, preserving full canvas functionality on iOS and Android without rebuilding the editor from scratch. Push notifications for new teacher feedback and streak reminders. iOS App Store and Google Play submission preparation.
Week 16Analytics dashboard: student progress metrics per cohort, time-on-task reporting, completion rates. CSV and PDF export for Ofsted readiness packs and qualification submission evidence.
Week 17Qualification tracking: evidence tagging against BTEC, GCSE, and Functional Skills assessment criteria. Structured portfolio export formatted for direct submission to qualification bodies.
Week 18MVP parent and guardian progress portal (read-only dashboard only): separate authentication, course completion percentage, badge summary, and teacher comments. No student work content, no PII, and no communication function exposed. Full report exports and messaging are post-launch enhancements.
Week 19Independent penetration test by a qualified third-party cybersecurity firm. Full remediation of any findings before production release. GDPR compliance audit: right-to-erasure workflow, data retention confirmation, Data Processing Agreement review.
Week 20App Store and Google Play submission. Multi-building and multi-cohort rollout. Comprehensive handover documentation delivered. Three-month post-launch support period commences.

8. Compliance, Safeguarding and Risk Management

Primary Legislation and Statutory Guidance

Keeping Children Safe in Education (KCSIE) 2025

KCSIE 2025 is the statutory guidance issued by the Department for Education that schools and alternative provision settings receiving public funding must follow to safeguard and promote the welfare of children. It places specific obligations on providers regarding online safety, staff training, and Designated Safeguarding Lead (DSL — the trained member of staff responsible for managing safeguarding concerns within an organisation) oversight of all digital activity. The platform is designed to actively support Oak Training in meeting these obligations.

  • No student-to-student messaging, eliminating a significant vector for peer-to-peer online abuse and grooming
  • All student work visible to teacher and DSL at all times; no private or hidden content areas
  • Tamper-evident, append-only audit log with timestamp and IP address for every user action
  • Keyword monitoring triggers timestamped DSL notifications transmitted in real time, supporting the DSL’s obligation to respond to safeguarding concerns promptly
  • Staff onboarding flow including a platform-specific safeguarding awareness module as a precondition for access; this supplements but does not replace Oak Training’s obligation to ensure all staff complete KCSIE-compliant safeguarding training delivered by qualified trainers
  • DSL incident log module for recording safeguarding concerns, decisions, and actions in accordance with KCSIE record-keeping requirements; external referral to children’s social care and other agencies remains an organisational responsibility conducted outside the platform
  • Prevent duty support: the keyword monitoring system includes radicalisation and extremism indicators as a configurable category within the content filter. Where a concern is identified, the DSL is alerted through the same notification pathway as other safeguarding concerns, supporting Oak Training’s duty under the Counter-Terrorism and Security Act 2015 to have due regard to the need to prevent individuals from being drawn into terrorism. Any decision to make a Channel referral (the formal multi-agency programme supporting individuals at risk of radicalisation) remains an organisational decision made by the DSL outside the platform, as with all external referrals
  • Separate DSL admin role with elevated permissions for audit log access, content review, and incident report generation

Data Protection Act 2018 and UK GDPR

The UK General Data Protection Regulation and Data Protection Act 2018 govern all processing of personal data. The platform implements Privacy by Design (Article 25), data minimisation (Article 5(1)(c)), and supports all data subject rights. Oak Training acts as the data controller; the developer and hosting provider act as data processors under formal Data Processing Agreements (Article 28 — the contractual instrument that governs what a processor may do with personal data on a controller’s behalf).

  • Lawful basis for processing: the primary basis is the performance of a public task (Article 6(1)(e)) arising from Oak Training’s commissioning arrangements with local authorities and schools under s.19 Education Act 1996. Safeguarding-related processing is grounded in legal obligation (Article 6(1)(c)) under KCSIE 2025. All lawful bases are recorded in Oak Training’s Record of Processing Activities (ROPA — the register that every data controller must maintain documenting all personal data processing, required by Article 30 UK GDPR)
  • Data minimisation at architectural level: only a username, an encrypted real name (visible to teachers and admin only, never to students), and the student’s created work are stored. No email address, date of birth, home address, or any other personal information is collected. The student’s real name is provided by the teacher when creating the account; students never enter or see it
  • Privacy by Design (Article 25): every new feature evaluated against a privacy impact checklist before development begins. A formal Data Protection Impact Assessment (DPIA — a structured risk assessment required by Article 35 UK GDPR before processing that is likely to result in high risk to individuals, including processing of children’s data at scale) will be completed and submitted to the ICO before the platform goes live
  • A plain-English privacy notice, written at an appropriate reading level for 14–16 year old students, is presented on first login and accessible at all times. It covers who processes student data, why, the lawful basis, what is collected, how long it is retained, and how to exercise data rights. A separate staff-facing privacy notice covers teacher and admin data processing
  • Right to erasure (Article 17): the admin dashboard provides a confirmed workflow to delete a student’s account, created work, portfolio content, and personal identifiers. Safeguarding-related records are excluded from erasure under Article 17(3)(b) and are retained in accordance with KCSIE 2025 requirements. Remaining audit log references are pseudonymised on account deletion, preserving platform security records without retaining personal identifiers
  • Data residency: all personal data is stored exclusively on UK-based infrastructure; no international transfer takes place and the transfer restrictions in Chapter V UK GDPR are not engaged
  • Formal Data Processing Agreements with the hosting provider and any third-party service providers (including the image content moderation service) provided before go-live
  • Data retention schedule: student portfolio work, account data, and created files are deleted automatically twelve months after programme end date. Content flagged as a safeguarding concern, DSL incident log entries, and associated audit records are excluded from automated deletion and retained until the student’s 25th birthday in accordance with KCSIE 2025 guidance
  • Data breach notification workflow built into the admin incident reporting module; supports the seventy-two-hour reporting window required by Article 33

ICO Children’s Code (Age Appropriate Design Code 2021)

The Information Commissioner’s Office Age Appropriate Design Code sets fifteen standards for online services likely to be accessed by children under eighteen. The platform is designed to comply with all fifteen.

  • Default high privacy settings, no opt-out required for the most private configuration
  • No commercial profiling or use of student data for advertising purposes whatsoever
  • No geolocation data collected by default
  • Parental consent model supported through the Phase 2 parent portal
  • Minimal data collection: only what is strictly necessary for the educational purpose
  • No nudge techniques or dark patterns encouraging students to share more data than necessary
  • Settings and privacy controls are accessible and easy to understand

Online Safety Act 2023

The Online Safety Act 2023 (OSA) creates a regulated service framework overseen by Ofcom. As a closed platform on which student-generated content may be seen by teachers, Oak Training’s platform is likely a regulated service under OSA s.3(1). As a small, closed alternative provision setting with cohorts of typically 10–30 students, it will fall into the lower tier of regulated services, attracting proportionate basic duties rather than the full obligations placed on large consumer platforms. The platform is designed to meet those duties.

  • Children’s Risk Assessment (OSA s.9): Prior to go-live, a documented children’s risk assessment will be completed, identifying all potential harms to child users from the platform’s content and functionality. This assessment will be reviewed following any material platform change, and records will be maintained for regulatory purposes in line with Ofcom’s Codes of Practice.
  • Safety by Design: Safeguarding measures are built into the platform architecture from inception, not retrofitted — in line with the OSA s.12 safety-by-design framework.
  • Content filtering: all student-submitted text scanned server-side against a keyword list covering self-harm, exploitation, abuse, and radicalisation
  • Image uploads scanned server-side using an established content moderation service; any flagged image is held for teacher review before becoming visible to other users
  • No anonymous posting: all content is attributed to an authenticated user
  • No public user-generated content visible to external parties
  • Teacher moderation queue holds flagged content pending review before submission is marked complete
  • Configurable keyword list updated by the administrator in response to emerging local safeguarding intelligence
  • Complaints Mechanism (OSA s.20): A user-facing mechanism for reporting safety concerns will be provided; all reports are logged to the tamper-evident audit trail and routed to the Designated Safeguarding Lead (DSL)
  • Platform Terms of Service addressing prohibited content and safety policies will be published in line with OSA s.14 requirements

Children Act 1989 and 2004 / KCSIE 2025 / Working Together to Safeguard Children 2023

The statutory duties in the Children Acts fall primarily on local authorities. Oak Training operates within the framework of Keeping Children Safe in Education 2025 (KCSIE) and Working Together to Safeguard Children 2023, which give practical effect to the welfare-of-the-child principle for alternative provision settings receiving public funding. The platform is designed to actively support the Designated Safeguarding Lead (DSL) — the nominated person responsible for safeguarding in every educational setting — in meeting those duties.

  • Real-time keyword alerts and unusual activity notifications surface welfare concerns to the DSL immediately
  • DSL incident log module for documenting concerns, actions taken, and referral outcomes within the platform
  • The platform supports the DSL in escalating concerns to the Multi-Agency Safeguarding Hub (MASH) — the local authority team that coordinates child protection referrals between agencies — or to children’s services, in accordance with KCSIE procedures. All welfare concerns, DSL actions, and referrals are timestamped in the audit log
  • Where a concern involves a member of staff, the platform supports referral to the Local Authority Designated Officer (LADO) as required by KCSIE
  • No feature exposes students to comparison, competitive shame, or distress by default
  • Session timeout with gentle countdown warning prevents unexpected data loss

Safeguarding Vulnerable Groups Act 2006 (as amended by the Protection of Freedoms Act 2012)

The Act (as substantially amended by the Protection of Freedoms Act 2012) establishes the vetting and barring framework for individuals working with vulnerable groups including children. Working directly with children in an alternative provision setting constitutes regulated activity, requiring an Enhanced DBS (Disclosure and Barring Service — the government body that carries out criminal record checks to help organisations make safer recruitment decisions) certificate plus a check against the Children’s Barred List as a legal prerequisite. The platform’s access control architecture supports Oak Training in enforcing these obligations.

  • All staff accounts require administrator approval before activation; administrators are responsible for confirming Enhanced DBS and Children’s Barred List clearance before granting platform access
  • The platform’s audit log records the date on which each staff member’s account was approved and the identity of the approving administrator, creating an evidence trail to support the organisation’s DBS compliance obligations
  • Role-based access control strictly limits what each staff role can see and do within the platform
  • Mandatory onboarding flow completion recorded in the audit log as a precondition for platform access

SEND Code of Practice 2015

While the Code directly binds local authorities and schools, Oak Training supports its commissioning schools’ SEND obligations through Equality Act-aligned reasonable adjustments built into the platform. Many of Oak Training’s students have unidentified or identified SEND needs, and the platform is designed to reduce barriers from the outset rather than as an afterthought.

  • Minimum 48px tap targets throughout, reducing motor coordination barriers
  • Simple, plain-English copy with reading age appropriate for the target age group
  • High-contrast colour combinations exceeding WCAG 2.2 AA (Level AA specifies minimum contrast ratios of 4.5:1 for normal text and requires all functionality to be operable without a mouse) throughout; high-contrast mode planned for Phase 2
  • Maximum three to four actions visible per screen, reducing cognitive load
  • Clear, legible sans-serif typeface (Nunito Sans) at 16px with 1.7 line height; Phase 2 option to switch to OpenDyslexic for students whose teachers identify this as beneficial
  • No time pressure on any task except the gentle session countdown warning

Equality Act 2010

The Equality Act prohibits discrimination on the basis of protected characteristics including disability, and places a duty on service providers to make reasonable adjustments. The platform targets WCAG 2.2 AA conformance throughout, with the exception of the custom HTML5 canvas editor — canvas elements have inherent screen reader limitations that are common across all canvas-based tools. A text-based list view of slide content will be introduced in Phase 2 to provide an accessible alternative for students with severe visual impairments.

  • WCAG 2.2 AA compliance target across all screens and interactions
  • All colour contrast ratios checked against WCAG 2.2 AA minimum thresholds
  • Keyboard-navigable interface for any student who cannot use touch
  • Two-factor authentication (2FA) available for all staff accounts; mandatory for all destructive admin operations — protecting the integrity of sensitive student records
  • Screen reader compatibility (including Apple VoiceOver for iPad) tested during UAT (User Acceptance Testing — structured testing by real end users to confirm the system meets requirements before launch) phase; canvas accessibility gap documented and addressed in Phase 2 roadmap

Platform Safeguarding Features Summary

Technical Risk Register

RiskLikelihoodImpactMitigation
Older iPad performance degradation under heavy canvas loadMediumHighLightweight frontend components with aggressive lazy loading. Image optimisation pipeline reducing asset sizes before delivery. Performance-optimised initial page loads. Canvas object count limits and performance profiling during UAT.
Shared hosting resource limits under peak concurrent loadMediumMediumAggressive caching of static assets. Optional CDN integration for edge caching. Database query optimisation and connection management. Load testing during Phase 2.
Internet connectivity loss at delivery venues during sessionsMediumMediumService worker caching keeps the web platform functional during temporary connectivity drops. Unsynced work is queued and replays automatically when the connection is re-established (tested for Safari iOS compatibility). Network status indicator gives students and teachers visibility of connectivity state. True offline-first resilience (surviving a closed app or flat battery) is provided by the native app in Phase 2.
Data breach or unauthorised access to student dataLowHighIndustry-standard field-level encryption for sensitive data including student name (application-layer encryption; full-disk encryption is covered by the Data Processing Agreement with the hosting provider). Data minimisation: only username, encrypted name, and student work stored. Student name visible to staff roles only; never exposed to student sessions or unauthenticated requests. Comprehensive audit logging. Rate limiting and IP whitelist for admin. SSL/TLS for all traffic. Independent penetration test in Phase 2.
Student attempting to bypass content filtersLowMediumAll content filtering is performed server-side with no client-side bypass possible. URL patterns stripped from student content before storage. Security headers prevent loading of any external resources. Teacher approval required before flagged content is marked complete.
Key person dependency risk on single developerMediumMediumComprehensive handover documentation delivered at project end. Thoroughly commented, consistently structured codebase. Private code repository with full version history transferred to Oak Training. Three-month post-launch support included in all phases.
Online Safety Act compliance gap if keyword list is not maintainedMediumHighPlatform provides keyword list management in the admin dashboard with version history. Oak Training’s DSL is responsible for regular review. Onboarding documentation includes keyword list maintenance guidance and recommended review frequency.
ICO Children’s Code audit finding requiring design changes post-launchLowMediumAll fifteen Children’s Code standards are mapped to platform features before launch. A formal DPIA (Data Protection Impact Assessment) completed and documented before go-live. An independent privacy review by a qualified Data Protection Officer recommended before Phase 2 rollout.
Equality Act / Accessibility: HTML5 canvas inaccessible to screen reader usersMediumMediumHTML5 canvas has inherent screen reader limitations common across all canvas-based tools. Phase 1 provides full keyboard navigation for all non-canvas screens. Phase 2 roadmap includes an accessible text-based list view of slide content alongside the canvas, addressing the Equality Act s.20 reasonable adjustment duty for students with severe visual impairments.
Safeguarding data retention breach: automated deletion removing records that must be keptLowHighA “safeguarding hold” flag in the database exempts DSL incident log entries, safeguarding-related content, and associated audit records from the standard 12-month automated deletion script. These records are retained until the student’s 25th birthday in line with KCSIE 2025 guidance. Admin deletion workflow explicitly excludes flagged safeguarding content and displays a clear warning before any account deletion.

9. About the Development Approach

Development follows Agile methodology with two-week sprint cycles. Each sprint begins with a planning session involving Oak Training stakeholders to agree and prioritise the backlog. Each sprint ends with a live demonstration of completed features on the staging environment and a retrospective. A weekly written progress report is shared with Oak Training’s project lead, including a screen-recorded video of completed features.

A dedicated staging environment, separate from production, is maintained throughout. All features are deployed to staging for User Acceptance Testing before any production release. Automated test suites across both the frontend and backend layers are maintained throughout, with a minimum eighty per cent code coverage target. All code is held in a private code repository with a structured branching strategy and mandatory peer code review. A three-month post-launch support period is included in every phase, covering bug fixes, security patching, and minor feature adjustments based on real-world usage data.

10. Next Steps

The immediate priority is the upcoming discovery meeting. That conversation will confirm requirements, validate the proposed approach against Oak Training’s day-to-day reality, and allow all technical details, timelines, and investment figures to be confirmed and formalised. Nothing in this proposal is fixed until that session has taken place and both parties are satisfied with the scope.

  1. Discovery Workshop: A two-hour facilitated session with Oak Training’s teaching staff, administration team, and IT stakeholders. The workshop validates requirements against actual daily workflows, reviews the ten interactive screen mockups, confirms Phase 1 feature scope, and agrees the definition of done for the MVP pilot. Can be conducted in person at Oak Training’s Blyth site or remotely.
  2. Technical Sign-Off: Any amendments arising from the Discovery Workshop are incorporated and a revised proposal issued. Oak Training’s authorised signatory formally approves the final scope, timeline, and investment for Phase 1.
  3. Contract and Timeline: A formal development agreement documents scope, payment milestones, IP assignment, data processing responsibilities, and post-launch support terms. Staging environment provisioned on the web hosting platform within five working days of contract signing.
  4. Phase 1 Kick-Off: Active development begins within two working weeks of contract signing. First sprint planning session scheduled, private code repository access shared with Oak Training, and first weekly progress report issued. Go-live target date for the pilot confirmed. Oak Training’s safeguarding lead briefed on the platform’s safeguarding architecture and DSL dashboard access.

Companion Mockup Files

Eleven fully interactive HTML mockup files are available separately as companions to this proposal. Each demonstrates the Oak Training branding, interaction patterns, and layout philosophy described in Section 5, and can be opened directly in any modern web browser without an internet connection. The full suite is also available live at oak.newcastlecomputerservices.co.uk.

mockup-01-login.html  •  mockup-02-student-dashboard.html  •  mockup-03-slide-builder.html  •  mockup-04-portfolio-workspace.html  •  mockup-05-teacher-dashboard.html

mockup-06-project-feedback.html  •  mockup-07-admin-dashboard.html  •  mockup-08-ipad-view.html  •  mockup-09-avatar-builder.html  •  mockup-10-theme-picker.html  •  mockup-11-student-messages.html