Sendix, on one page
What Sendix is
Sendix is a UK SEND tool for school SEND teams and trusts, built around the annual review: it sets out the evidence on each outcome from the reports, tracking and notes a school already has, and checks plan wording against the guidance.
In Scotland, it shows how each child is doing against each IEP target before the termly review, with the source beside every line. Child’s Plans are in development with practitioners.
Staff make every decision, and you can see it working on a fictional plan in a 30-minute walkthrough.
Sendix AI Ltd, registered in Scotland (SC883770). ICO registration ZC264381. Your school, trust or council is the data controller; Sendix is the processor.
What it costs
England
- School
- £20 per EHCP a year Minimum £300 a year. The same rate for mainstream, special and independent special schools and alternative provision.
- Trust
- £20 per plan a year Plans pooled across the trust’s schools, on one contract. Minimum £2,000 a year.
Scotland
- School
- £20 per IEP or Child’s Plan a year Minimum £300 a year. A council buying for its schools is quoted.
Founding schools
Free for the spring term for up to 10 annual reviews, then your price is fixed for two years. Open to 10 schools.
Real pupil data is used only once four things are in place: a data processing agreement (DPA) signed by both sides, for the school or trust by someone it has authorised; a current Cyber Essentials certificate held by Sendix; Sendix’s written confirmation that real plans are released for that organisation; and its plans.
The licence
- Length
- 12 months from the start date.
- Fixed for the term
- Your price doesn’t change during the licence term.
- No automatic renewal in year one
- We remind you 60 days before the first year ends. The licence renews only if you choose to renew.
- Invoicing
- Annually, or termly if you ask.
- Ending early
- Either side can end the licence if the other seriously breaches it and doesn’t put it right within 30 days of written notice, or becomes insolvent. If we close the service, you get at least 90 days’ notice and a refund of fees prepaid for the time after.
- VAT
- Prices exclude VAT, which is added where it applies.
All prices and terms: sendix.ai/pricing.
How pupil data is protected
- Which AI provider processes the data?
- Amazon Bedrock, part of Amazon Web Services, runs the AI model (Qwen3-235B-A22B-2507) in AWS London. It reads minimised passages: Sendix removes the pupil’s name, pupil number, NHS number, postcode and labelled full dates of birth first. Bedrock doesn’t store prompts or outputs for this model or use them for training, and the DPA rules out using your data to train or improve AI models (clause 2.4).
- Who are the sub-processors?
- Three, all processing in the UK: Microsoft Azure (hosting, database, key management and logging), Amazon Bedrock (the AI model) and Amazon SES (email to staff, with no pupil data). We give 30 days’ notice before adding or replacing one, and you can object.
- Where is the data processed and stored?
- In the UK, in Azure UK South and AWS London. Backups stay in UK South. Under the DPA we won’t move your data outside the UK without your written consent and appropriate safeguards (clause 10). This website is hosted in Azure West Europe and doesn’t receive school data.
- How long is it kept?
- By default, a checked plan and its findings are deleted 90 days after the check, evidence records after 365 days, and drafts 30 days after someone deletes them. Your school or trust can set its own periods. Security logs that don't relate to a document are kept for 730 days. Application logs hold no plan text and are kept for 30 days.
- What happens to our data when we leave?
- You choose whether we return it in a commonly used format, delete it, or both. We do it within 30 days and confirm the deletion in writing. Copies in backups are overwritten within 35 days (DPA clauses 8.1 and 8.2).
- What happens to our data if Sendix closes?
- The same end-of-service clauses apply whenever the agreement ends: you choose return, deletion or both within 30 days, with deletion confirmed in writing, and backups are overwritten within 35 days (DPA clauses 8.1 and 8.2). The DPA binds us for as long as we hold your data (clause 12.1). If we decide to close the service, our terms give you at least 90 days’ notice, with exports open throughout, and refund prepaid fees for the time after it closes (terms, clause 10.4).
- Has Sendix been security tested?
- An independent penetration test of cross-school access is completed before we release live pupil data to more than three organisations. We applied for Cyber Essentials on 9 October 2026; the assessment is under way and no certificate has been issued.
- How do staff sign in?
- With a password of at least 12 characters and an authenticator app. Multi-factor authentication is mandatory for SENCOs, SEND leads and SEND assistants. Single sign-on isn’t available yet.
The full assurance pack, with a DPIA template for each type of controller: sendix.ai/trust.
Next step
A 30-minute walkthrough on a fictional plan, with your DPO if you like. No pupil data, and nothing to sign.
Book a walkthrough (opens cal.com in a new tab)or email hello@sendix.ai
https://cal.com/sendix/30min