This is an old revision of the document!
Moving a school management information system to the cloud is now close to standard practice, but “cloud-based” on its own tells a school almost nothing about how secure that hosting actually is. Two vendors can both describe their product as cloud-based while differing significantly in hosting location, certification and the practical protections behind the marketing term. Due diligence needs to go past the label.
Handled this way, a provider change is a planned project rather than a gamble. You move on your own terms, verify each step before the next, and keep a full term of records intact throughout. The schools that struggle are usually the ones that rushed the mapping or skipped the training. Give both the time they need and the switch is far less daunting than it first appears.
Any vendor claiming ISO 27001 or PCI-DSS Level 1 certification, Compass Education Ireland Education included, should be able to produce current, dated certification evidence on request rather than a general assurance statement. A useful due diligence exercise is to ask every vendor on a shortlist for that evidence side by side. A vendor that can produce an up-to-date certificate on request has clearly built the audit process into how it runs the business; one that cannot has usually not been through that audit at all.
Data portability is the second essential question, and it should be asked before any enthusiasm about features clouds the discussion. If the school ends the contract in three or five years, can it export its full historical data, in a usable format, without additional fees or delay? Get this answer in writing as part of the contract itself, not as a verbal assurance during the sales process, since it is precisely the point where the balance of power shifts away from the school once a contract is signed.
Onboarding is the cost most often missed at quote stage. Data migration, configuration and training take time and sometimes money. Ask whether onboarding is included or billed separately, how many training sessions you get, and what it costs to train new office staff later. A cheap licence with expensive, slow setup is not a cheap system.
A fixed system gives you a set list of features, take it or leave it. It can work if the bundle happens to match how your school runs. The trouble is that schools are not identical. A large multi-academy trust, a small independent and a faith primary all record different things and answer to different bodies. A one-size product asks each of them to bend to the software, and usually one of them ends up keeping a spreadsheet on the side to cover the gap.