SAR Automation at the Scale of Your Estate

Built for multi-academy trusts and FE and HE colleges, Fisar handles Subject Access Requests across every school, campus and site – per-school data separation, trust-wide oversight and complete audit trails, without adding to the workload of local teams or central staff.

30 days
15 minutes
95% reduction in SAR processing time
GDPR compliant
Secure, encrypted data handling

About

Advanced Automation

Central Oversight

Robust Security

Eliminates Compliance Risk

In a trust, every SAR lands somewhere different – one school's office, another's inbox – and every school handles it its own way. Colleges face the same problem at even greater scale: a single college can hold data on thousands of students and hundreds of staff, spread across student record systems, email archives and shared drives. The accountability is central; the data and the effort are not.

Fisar brings every request into one controlled process. The platform connects to the systems each school or campus already uses, automatically aggregates relevant data, removes duplication, assists with redaction and delivers completed SAR packs securely – while your central team watches every case move through one dashboard.
Requests that consumed days of local staff time become a structured, compliant workflow completed in minutes.

Integrates with:

The Trust & College

SAR Challenge

  • Why SARs Multiply
    Across Large Estates

    A single school's SAR is already demanding. Multiply it across a trust of many schools – or a college larger than most trusts – and the risk stops being occasional and becomes structural. One mishandled disclosure anywhere in the estate is a breach for the whole organisation.

    Scale Multiplies the Work

    Each school or campus holds its own MIS records, email accounts, safeguarding logs and CCTV. A request spanning several sites means the same 20–30 hours of manual effort, repeated.

    Inconsistent Local Processes

    When every school fulfils requests its own way, quality varies – and the trust carries the compliance risk for the weakest process in the estate.

    Central Accountability, Local Data

    DPOs and trust leaders answer to the ICO for data they don't directly hold. Without central visibility, deadlines and quality are impossible to guarantee.

    College Complexity

    FE and HE colleges can hold records on 4,000+ students and 500+ staff – larger than any secondary school and most trusts – with histories that stretch back years.

Our Process

Four Stages. Fully Compliant.

Fisar guides trusts and colleges through a structured, compliant process that aligns with ICO guidance – consistent at every school, visible from the centre.

01

Setup &

& Integration

Guided Onboarding
Connect Every Site
Secure Setup
MIS, Email, CCTV
Estate-Wide Rollout
  • After signing up, you'll receive access to your secure Fisar account. We'll guide you through connecting the systems each school or campus already uses, with simple instructions for your MIS platforms, email servers and CCTV storage. Once you've provided the connection details, our team handles all technical integration work – rolled out school by school so the estate goes live in a controlled, predictable way.

02

SAR Request

Intake

Portal Submission
Auto Log & Acknowledge
Tracked from Day One
Reference Assigned
Deadline Safe
  • Requests are submitted through your organisation's dedicated web portal, wherever in the estate they arrive. The system automatically logs each request, assigns a reference number and sends immediate acknowledgement to the requester – so nothing sits unnoticed in a school office inbox while the clock runs.

03

Data Collection

& Identity Verification

Secure ID Check
One‑Click Aggregation
Every Connected System
Per-School Separation
Data Collection in Minutes
  • Fisar automatically emails the requester a secure link to upload identification documents. Meanwhile, your DPO can trigger automated data aggregation with a single click. Fisar queries every relevant connected system simultaneously – pulling records from the right school's MIS, searching its email archives and gathering any other relevant sources – while other schools' data stays untouched.

04

Review &

Secure Delivery

AI-Assisted Redaction
DPO Approval
Encrypted Delivery
Estate-Wide Audit Trail
  • All collected documents are processed through our AI-powered redaction system to automatically remove personal information that shouldn't be shared. Your DPO reviews the completed pack, adjusts anything that needs it and approves release. Fisar then delivers everything as a secure, encrypted package and marks the case complete with a full audit trail your central team can evidence at any time.

01

Setup &

& Integration

Guided Onboarding
Connect Every Site
Secure Setup
MIS, Email, CCTV
Estate-Wide Rollout
  • After signing up, you'll receive access to your secure Fisar account. We'll guide you through connecting the systems each school or campus already uses, with simple instructions for your MIS platforms, email servers and CCTV storage. Once you've provided the connection details, our team handles all technical integration work – rolled out school by school so the estate goes live in a controlled, predictable way.

02

SAR Request

Intake

Portal Submission
Auto Log & Acknowledge
Tracked from Day One
Reference Assigned
Deadline Safe
  • Requests are submitted through your organisation's dedicated web portal, wherever in the estate they arrive. The system automatically logs each request, assigns a reference number and sends immediate acknowledgement to the requester – so nothing sits unnoticed in a school office inbox while the clock runs.

03

Data Collection

& Identity Verification

Secure ID Check
One‑Click Aggregation
Every Connected System
Per-School Separation
Data Collection in Minutes
  • Fisar automatically emails the requester a secure link to upload identification documents. Meanwhile, your DPO can trigger automated data aggregation with a single click. Fisar queries every relevant connected system simultaneously – pulling records from the right school's MIS, searching its email archives and gathering any other relevant sources – while other schools' data stays untouched.

04

Review &

Secure Delivery

AI-Assisted Redaction
DPO Approval
Encrypted Delivery
Estate-Wide Audit Trail
  • All collected documents are processed through our AI-powered redaction system to automatically remove personal information that shouldn't be shared. Your DPO reviews the completed pack, adjusts anything that needs it and approves release. Fisar then delivers everything as a secure, encrypted package and marks the case complete with a full audit trail your central team can evidence at any time.

Pricing

Simple, transparent pricing

An annual licence sized to your organisation — from specialist schools through trusts, colleges and beyond. Generous processing built in, and the freedom to top up anytime.

Your plan is set by the kind of organisation you are — choose the one that fits, not the biggest number. The processing allowance is included; if you ever need more, you can top up anytime.

How we estimate SARs

“≈ SARs” figures assume a standard SAR of about 10GB and are rounded down — large or long-history requests can use more.

Annual licence

One simple yearly fee per organisation, billed annually (+VAT). No per-request charges.

Includes processing (GB)

Every plan includes a processing allowance, measured in GB, with comfortable headroom above expected demand.

Top up anytime

Add more whenever you need it. The allowance resets each year — it doesn't roll over.

What a standard request really uses

A SAR uses processing based on the volume of emails, files, messages and attachments gathered for that person across the relevant period. We size everything around a standard request of about 10GB — a figure from our own internal research into real Subject Access Requests — and most land close to it.

It's an average, not a cap. If someone has a long history with your organisation, their request can hold far more data — sometimes well beyond 10GB — and use more of your allowance. That's completely normal. Your dashboard always shows what's left and warns you before you run low, and you can top up anytime, so a request is never blocked unexpectedly.

Top-ups

Flat £10 per GB, added to your current year's allowance — no surprises.

Top-up Adds Roughly

All prices are exclusive of VAT.

Ready to Transform Your SAR Process?

Book a Call

FAQ

Everything you need to learn about Fisar

Common questions about our platform, security measures and how we help trusts and colleges manage Subject Access Requests efficiently and compliantly.

Show More
  • 01

    What problem does Fisar solve for schools?

    Schools typically spend 20-30 hours processing each SAR manually, pulling teachers and administrators away from teaching and operational duties and creating pressure around ICO deadlines. Fisar removes this burden through intelligent automation, so staff can focus on education rather than paperwork.

  • 01

    Which school systems does Fisar integrate with?

    Fisar connects with major MIS and safeguarding platforms used in education, including Bromcom, Integris and CPOMS, as well as Microsoft 365 and Google Workspace for email, files and messages. Additional school systems can be added on request.

  • 01

    How quickly can a school go live?

    Most schools are operational within 1-2 weeks but the process can be completed quicker if necessary. Fisar manages the technical setup and provides clear onboarding so staff can begin using the platform almost immediately.

  • 01

    Is Fisar aligned with DfE and GDPR requirements?

    Yes. Fisar is designed to meet UK GDPR obligations and to align with DfE digital and safeguarding standards. The platform provides encrypted storage, per-school data isolation and full audit trails.

  • 01

    How is third-party pupil information protected in a disclosure?

    When a document references a pupil other than the data subject, Fisar's AI identifies that third party and redacts their information before disclosure. Your DPO reviews the redacted files before anything is released, helping you avoid disclosing information about other pupils.

  • 01

    How does Fisar identify the correct pupil?

    Fisar verifies identity using the records and metadata from your connected school systems, and separates exact matches from partial ones using confidence scoring. Where a pupil is not present in a connected system, your DPO verifies identity manually before the SAR proceeds.

  • 01

    Can multi-academy trusts use Fisar across multiple schools?

    Yes. Fisar supports MAT structures with secure data separation for each school while allowing central oversight where appropriate, giving trusts trust-wide visibility of SAR volumes and compliance.