ContraCase helps schools and academy trusts manage subject access requests, data breaches, GDPR compliance and operational governance — through a single, practical platform built around Microsoft 365.
SAR deadline tracking
Breach reporting support
Native integration
Audit trail coverage
The Challenge
Managing SARs, data breaches and GDPR compliance through spreadsheets and shared inboxes creates risk. Deadlines get missed, audit trails are incomplete, and DPOs lack visibility across trust schools. ContraCase is designed to improve visibility, reduce manual administration and support statutory deadline management.
What It Covers
Built for the day-to-day data protection work that schools and trusts actually do.
Track SARs from receipt to response. Manage ID verification, data collation, redaction and statutory deadlines.
Log and track data breaches with risk assessment, ICO notification tracking and corrective action recording.
Maintain clear records of processing activities, consent management and data protection impact assessments.
Handle parent requests, staff data requests and general enquiries with full audit trails and deadline tracking.
Centralised dashboards showing compliance across all schools within a multi-academy trust.
Role-based access, complete audit trails and Microsoft 365 integration for secure, transparent data handling.
Platform Features
A focused, approachable tool designed for education staff who manage data protection alongside their day job.
Manage subject access requests with deadline tracking, ID verification and response workflows.
Record, assess and track data breaches with ICO notification support.
Automatic statutory deadline calculation with working day tracking and overdue alerts.
Every action recorded with timestamps and user identity for accountability.
Compliance reports across all schools for governors, DPOs and trust boards.
Appropriate access for headteachers, school business managers, DPOs and governors.
Works with your existing Microsoft 365 environment — no new systems to learn.
Purpose-built workflows to support DPO oversight across schools and trusts.
Security & Trust
Works within your existing Microsoft environment. No additional data storage systems required.
Headteachers, SBMs, DPOs and governors see only what they need to.
Every action is recorded with timestamps and user identity for complete accountability.
Multi-factor authentication supported via your existing identity provider.
Infrastructure hosted within UK and EEA data centres. Data stays close to home.
AI assists with drafting and categorisation only. All decisions require human approval.
Design Partner Programme
We're looking for schools and MATs to join our Design Partner Programme. You'll get early access to ContraCase, guided onboarding, and a direct line to the product team — in exchange for honest feedback about what works and what doesn't.
This is a practical working relationship. We want to understand how your school or trust actually manages data protection day-to-day.
Who Should Apply
Get in Touch
Tell us about your school or trust and we'll be in touch to arrange a conversation.