A tutoring agency's safeguarding policy should name a responsible lead, set out how tutors are checked and trained, say how lessons must be run, explain how concerns are reported and logged, and tell parents what to expect. AI can draft the outline and forms in an hour; a qualified person must check them against the rules that apply to you.
The order matters more than the drafting speed. Most agencies that get into trouble did not lack a policy document; they had one that nobody had adapted to their own tutors, or an incident that was discussed on WhatsApp and never written down. So the checklist below is built around evidence: for every item, what you would show a parent, an insurer or an investigator if they asked.
What an AI draft can and cannot do here
A chat assistant is good at structure. Ask it for the headings of a safeguarding policy for a small tutoring agency and it will return a sensible skeleton in seconds, along with plain-English wording for a parent sheet and a tidy incident-log layout. That saves a few hours of staring at a blank page, and it is the right use of the tool.
What it cannot do is know which rules bind you. Whether you may run a criminal-record check on a self-employed tutor, which level of check is available for one-to-one work with children, whether you have a duty to report a concern to a named body, and how long records must be kept all depend on where you operate and how your tutors are engaged. The assistant will sound confident about all of it, and some of its confidence will be wrong. Treat every legal-sounding sentence in a draft as a placeholder with a question mark next to it until your adviser has confirmed it.
One further limit: never type a real child's details into the tool. If you want help tidying a note, strip it to roles first ("the student", "the tutor", "the parent") and keep the original in your own record system. The data and consent checklist written for a clinic makes the same point for health records, and the reasoning carries across.
The Complete Excel Course with AI Integration
From formulas and pivot tables to Power Query, DAX, VBA and AI with Copilot, ChatGPT and Claude — hands-on from the first lesson.
By Sagnik Bhattacharya and Virginia Thorn, Primetime Emmy Award winner
Buy nowThe policy outline, section by section
Use this as the target shape. Each section should end up as a page or less; a 25-page policy that no tutor has read protects nobody.
- Purpose and scope. Who it covers (employed and self-employed tutors, office staff, anyone with access to student data) and which activities (home lessons, centre lessons, online lessons, group sessions, exam-day support).
- Named safeguarding lead and deputy. A person, not a role title, with a phone number and the hours they can be reached. Add a deputy for when the lead is ill or is the subject of the concern.
- Recruitment and vetting. The checks in the table further down, who carries them out, and what happens if one fails or cannot be completed.
- Tutor conduct. Where lessons may take place, whether a parent must be in the building, the rules on touch, gifts, private messaging and social media, and what a tutor does if a student discloses something.
- Online lessons. Platform, recording, camera and background rules (set out in their own section below).
- Reporting a concern. A step-by-step route from "tutor is worried" to "lead decides what happens next", with the same-day deadline for passing it on.
- Records and confidentiality. What is logged, who can read it, how long it is kept and how it is stored.
- Allegations about a tutor. Who handles them, how the tutor is suspended from new lessons while it is looked into, and who is told.
- Training and review. What each tutor completes before the first lesson, the annual refresher and the date of the next policy review.
Here is a prompt that produces the first draft of that shape. Fill the square brackets from your own business before you send it.
You are helping the owner of a small tutoring agency draft a safeguarding policy.
Agency: [number] self-employed tutors teaching [ages] at home, in a rented room and online.
Write a plain-English outline with these headings: purpose and scope, safeguarding lead and deputy,
recruitment and vetting, tutor conduct, online lessons, reporting a concern, records and confidentiality,
allegations about a tutor, training and review.
Under each heading write 3-6 short rules in the second person for tutors.
Where a rule depends on local law or regulator guidance, do not guess: write
[CHECK WITH ADVISER: what needs confirming] in its place.
Do not invent legal duties, time limits or names of bodies.The last two lines are the important ones. Models fill silence with plausible detail, and an instruction to leave a marked gap gives you a list of questions for the legal review instead of a document that looks finished but is not.
A sample of what comes back, and what to fix
Suppose the assistant returns this under "Reporting a concern" (illustrative output):
If a student tells you something that worries you, listen, do not promise to keep it secret, and tell the safeguarding lead the same day. Write down what was said in the student's own words. [CHECK WITH ADVISER: which external body, if any, must be told and within what time.] The lead will decide whether to contact the parent, and will record the decision and the reason.
Three edits turn that into something usable. First, "the same day" is a good rule but needs a back-up: if the lead cannot be reached within two hours, tutors call the deputy. Second, "contact the parent" needs an exception, because telling a parent is sometimes the wrong move when the concern is about someone in the household; the lead should decide, with advice, and note why. Third, the bracketed gap must be filled by a person who knows the rules, not by asking the assistant again.
Vetting checks: build the table, then research each row
Rather than asking an AI which checks are "required", build the table yourself and give each row an owner. Then ask your adviser or the relevant regulator which rows are mandatory, optional or not permitted for your tutors where you operate. A filled-in version for an agency with self-employed tutors might look like this (illustrative):
| Check | Evidence kept | Who does it | Confirm with adviser |
|---|---|---|---|
| Photo ID matched to the person, seen in person or on a live video call | Date seen, document type, initials of checker (not a copy, unless the law lets you keep one) | Office manager | Whether copies may be kept and for how long |
| Criminal-record check at the level available for work with children | Certificate number and date, or the result note | Safeguarding lead | Which level applies to self-employed tutors; whether you or the tutor must apply |
| Right to work | Date checked, outcome | Office manager | Rules for self-employed versus employed |
| Two references, one from a recent role with children or young people | Referee, date, spoken or written, answers | Recruiter | Questions you may and may not ask |
| Qualification or subject evidence | Certificate seen, date | Recruiter | None, usually |
| Gaps in work history explained | Note of the explanation | Recruiter | None, usually |
| Self-declaration of anything that would make them unsuitable | Signed form | Tutor | Wording |
| Safeguarding briefing completed | Date, version of policy shown, signed acknowledgement | Safeguarding lead | Minimum content |
The right-hand column is where checks differ by country, and sometimes by state or region within one. Some places let a business request a criminal-record check on a tutor directly, some only let the individual request their own and show it, and some keep a barred list that only the higher levels of check search. None of that is something to take from an AI summary, but knowing what the check is called where you work makes the adviser's job shorter.
What the check is called in five common markets
Here is how the official pages describe the checks for work with children, as read in November 2026. Treat it as a map for the conversation with your adviser, not a ruling on your tutors.
| Where the tutor works | The check | Who applies |
|---|---|---|
| England and Wales | DBS check at four levels: basic, standard, enhanced, and enhanced with barred lists, which adds whether the person is barred from the role | Normally the employer, or an organisation acting for it. A paid self-employed tutor in an eligible role can apply for an enhanced check (with or without barred lists) for themselves, or the agency hiring them can apply on their behalf |
| Scotland | Disclosure Scotland's Level 1, Level 2, Level 2 with barred list check, and the Protecting Vulnerable Groups (PVG) scheme, which is a legal requirement for regulated roles with children | Depends on the level and the role; confirm with Disclosure Scotland |
| Northern Ireland | AccessNI basic, standard or enhanced check | Individuals can apply online for a basic check; ask AccessNI who applies for the higher levels in your case |
| Canada | Vulnerable sector check: a police information check plus a search for sexual-offence records that have had a record suspension | The hiring organisation requests it and the tutor consents through the local police service. It is only available where the position itself gives authority over children or vulnerable people |
| Germany | Extended certificate of conduct (erweitertes Führungszeugnis) for paid or voluntary supervision, care, education or training of minors | The tutor applies, and must include a written request from the agency confirming the role qualifies |
| Australia | Working with Children Check, run at state or territory level and not identical everywhere: Queensland's is called a blue card, and Victoria's requires applicants to complete child-safety training from 19 October 2026 | The tutor applies; record the clearance number and expiry date on your table |
| USA | Background checks bought from a screening company, plus state record checks that vary by state; the National Sex Offender Public Website (NSOPW) searches the registries of all 50 states, the District of Columbia, the territories and tribal lands | The agency orders the report. Federal guidance for employers requires a stand-alone written notice and the candidate's written permission first; ask your adviser how that applies to contractors and which state checks to add |
Two practical points follow. A domestic check only covers time spent in that country: the GOV.UK guidance, for example, says a DBS check will not cover time an applicant lived abroad, and the employer may ask for a check from the other country. And online lessons cross borders, so a tutor in one place teaching a student in another may need you to think about both sets of rules. A short call with a solicitor or your professional body, with your table and this map in front of you, answers every row in one sitting.
When you move on to scoring candidates after the checks, the tutor recruitment scorecard tutorial shows how to keep the safeguarding gate separate from the subject-skills score, so a strong teacher never skips a check.
Online lessons: rules that fit on one page
Online teaching creates risks that home visits do not: lessons that happen in a bedroom, recordings nobody controls, and private messaging channels that drift away from the parent. Write the rules as plain statements and put the platform name in them. A workable set for a small agency:
- Lessons run on [platform] using a link created from the agency's account, not from the tutor's personal contacts.
- The parent or carer knows the link and the time, and for students under a stated age an adult is in the house and the door of the room stays open.
- Tutor and student both use their real names on screen, with the student's camera showing the learning area and a neutral or blurred background for the tutor.
- Lessons are one tutor to one student, unless the agency has agreed a group in advance.
- Recording is on only where the parent has agreed in writing, the tutor says so at the start, and recordings are stored in the agency's account, never on a personal device.
- Communication happens through the agency's channel (email to the parent, or the platform's chat). No personal mobile numbers, social-media friend requests or direct messages to a student.
- If a tutor sees or hears something worrying during a lesson, they end the call politely, and report it using the usual route.
Whether you record at all is a judgement call, and the answer differs between agencies. Recording gives you evidence if a dispute arises, and it deters poor conduct, but it creates a store of children's images and voices that you must protect and delete on a schedule. If you do record, the consent wording belongs in the parent contract, not hidden in a policy nobody reads.
An AI assistant is useful here for rewriting this list at the right reading level. Ask it for a version a ten-year-old can follow, and a version for parents that explains why each rule exists. Both are better than the original at getting buy-in, and both still need the lead's sign-off.
An incident log that someone will actually fill in
A log is a table with one row per concern, kept in a restricted file, not an inbox. The fields:
- Reference number and date logged
- Date, time and setting of the event (home, centre, online)
- Who raised it and their role
- Student identifier (initials plus a code, not the full name in the main list)
- What was seen or said, in the words used, separated from anyone's opinion
- Immediate action taken and by whom
- Time the lead was told
- Lead's decision and reason
- External report made, to whom, when (or "not required", with reason)
- Follow-up date and outcome
- Restricted-access note: who may read this row
A filled-in row shows the standard to aim for (entirely illustrative):
| Field | Entry |
|---|---|
| Ref / logged | SG-2026-007 / Tue 14:10 |
| Event | Mon 17:30, online lesson, student's bedroom |
| Raised by | Maths tutor |
| Student | K.R. (code 4417) |
| What was said | Student said, "I'm not allowed to eat until my dad gets home, so I'm tired." Tutor did not question further. |
| Immediate action | Tutor ended the lesson on time and phoned the lead at 18:05. |
| Decision | Lead took advice from the agency's adviser on Tue, agreed to speak to the parent first, and noted the reason. |
| Outcome | Review again Fri 12:00. |
Notice what is missing: no guesses about what the remark means and no tutor's judgement of the family. A good log records facts, decisions and reasons. AI can help in exactly one place: turning a tutor's rambling voice note into those fields. Do that with the student's details removed first, and read the output against the original before it goes anywhere, because a model will sometimes tidy a quotation into something the child never said.
The parent information sheet
Parents trust an agency that tells them plainly what the rules are. One page is enough: who the lead is and how to reach them, what checks each tutor has had (stated honestly, without overclaiming), where and how lessons happen, what the agency records, who to speak to if they are unhappy, and what happens to the data. Ask the assistant for a version at a reading age of about twelve, then read it aloud. If a sentence needs two breaths, split it.
Take care with promises. "All our tutors are fully vetted" is risky unless every tutor has completed every row of your table, and one missing certificate makes it untrue. Say instead what is true: "Before their first lesson every tutor completes the checks listed below." Then list them. The same care applies to AI-written marketing; the tutoring Facebook ads tutorial covers keeping ad claims inside what you can prove.
The legal-review step, done properly
Treat the review as a defined job with a defined output, not a general "can you look this over". Send your adviser:
- the draft policy with every bracketed gap still visible;
- the vetting table;
- a one-paragraph description of how tutors are engaged and where lessons happen;
- a list of the specific questions the gaps represent.
Ask for three things back: the corrections, a list of anything mandatory you have missed, and the date by which they would expect the policy to be reviewed again. Keep the reply with the policy so the version history shows who checked what, and when. Reviews often cost less than people fear because the adviser is correcting and confirming, not starting from nothing, and your gaps list stops them wandering.
Mistakes a review typically catches
Three that appear in AI-drafted policies. The draft cites a named body or form that does not exist where you operate, or exists under a different name. It states a retention period for records as fact when it varies by record type and by the age of the student. And it describes the agency as "responsible for" tutor conduct in a way that conflicts with the tutor's self-employed status in your contracts. None of these are visible to a reader who does not know the rules, which is why the review step cannot be skipped.
A worked month: an agency of twelve tutors
Say a small agency with twelve self-employed tutors, teaching ages 7 to 16 at home and online, has no written policy. Illustrative timings for the first month:
- Week 1, about three hours. The owner names a lead and deputy, runs the outline prompt, and builds the vetting table. They send the draft and gaps list to a solicitor.
- Week 2, about two hours. While the review is out, the owner audits each tutor against the table. Seven tutors have everything; three lack an up-to-date criminal-record check; two have only one reference. These go on a follow-up list with dates.
- Week 3, about two hours. The solicitor's corrections come back. The owner updates the document, produces the tutor and parent versions with AI help, and sets up the incident log in a restricted spreadsheet.
- Week 4, about two hours. A 30-minute briefing for all tutors, signed acknowledgements, the parent sheet sent out and added to onboarding, and a calendar entry for the annual review.
Roughly nine hours of the owner's time, plus the adviser's fee, which you should ask for as a fixed quote. The figure that matters is the audit result in week two, because it shows the real gap between "we think everyone is checked" and the evidence on file.
Checking it works
A policy has not worked until you have tested it. Pick a scenario ("a ten-year-old says something worrying at the end of an online lesson at 6 pm on Friday") and ask a tutor, without notice, what they would do. If they do not know who to call, the briefing failed, not the tutor. Run one such drill per term, log it, and fix the gaps. Also, sample one tutor's file each month against the table: can you show every row in under five minutes? If not, that is the next job.
For the wider admin picture around this, including where records, timetables and invoices live, the tutoring centre admin tutorial maps what to keep in one place.
What to keep out of AI tools altogether
A short list worth pinning above the desk. Keep out of any assistant: children's full names with any health, family or behavioural detail; photographs and recordings of students; copies of identity documents and criminal-record certificates; the content of live safeguarding cases. If you are unsure whether an AI product stores or learns from what you type, treat it as if it does, and check its business terms before relying on it. Privacy settings change, and a default that was off last quarter may not be now, so check the setting itself rather than remembering what it was.
Questions agencies ask about safeguarding paperwork
Can I paste a real concern about a child into ChatGPT or Claude?
Not in a consumer account. Keep names, school names and health details out of any AI tool. If you want help tidying an incident note, replace the child, parent and tutor with initials or roles, and keep the original in your own record system. A business plan with training switched off lowers the risk but does not remove the need to minimise what you share.
Do self-employed tutors on my books need to follow my policy?
Yes, make it a condition of working through you. Have each tutor read the policy, sign a one-page acknowledgement and attend a short briefing before their first lesson. Whether they count as employees for legal purposes is a separate question for your adviser, and it can change which checks the law lets you run.
How often should the policy be reviewed?
At least once a year, and straight after any incident, any change in the law that applies to you, or any change in how you teach, such as adding online lessons or group sessions. Date every version and keep the old ones, so you can show what rule applied when a concern was raised.
Is a safeguarding policy generated by AI enough on its own?
No. An AI draft is a starting outline that has never seen your agency, your tutors or the rules that bind you. It needs a named lead to adapt it, a qualified adviser to check it against current law and guidance, and a briefing so tutors actually know what to do.
Further reads
- Safeguarding Policy Template for a Children's Club: Draft It With AI — A parallel policy template for group settings, useful for comparing wording.
- Is AI Worth Paying For in a Small Tutoring Business? — Decide which AI tools earn their fee before adding more.
- How Tutors Can Plan a Week of Lessons With AI in an Hour — The teaching side of the same week, planned in an hour.
- How Tutoring Centres Use AI to Write Parent Progress Reports — Parent communication that stays factual and consistent.
- Tutor Scheduling Software: Bookings, No-Shows and AI Reminders — Booking tools that can hold lesson-link and attendance records.
- Dance Studio Handbook: Parent Policies Drafted With AI — Another children's-activity handbook, for comparing parent wording.
- Fostering Agency Software Checklist: What to Check and Where AI Fits — A buyer's checklist for small fostering agencies: records, panel papers, supervision logs, access controls, exit terms and the narrow places AI belongs.
- Regulation 44 Report Template: Turn Visit Notes Into a Draft With AI — What a Regulation 44 report must contain, a section template, and a safe way to turn visit notes into a draft the visitor then verifies.
- Tutoring Lead Generation: Enquiry to Trial Lesson With AI — A five-minute enquiry reply, three follow-ups, trial-lesson booking, a drop-off tracking sheet and consent wording, drafted with AI.
- Can AI Write Private School Fee Reminder Letters Parents Accept? — A four-stage fee reminder ladder for a private school, drafted with AI, with hardship wording and the checks a bursar and solicitor still own.
- How to Start a Tutoring Agency: Tutors, Pricing and AI Admin — The margin per lesson hour, tutor and parent terms, safeguarding basics and first-month admin for a new tutoring agency, with AI doing the drafting.
- AI Tools and AI Development: The Complete 2026 Guide — the AI hub, including every tutorial in the AI-for-business series.
Sources (read November 2026): GOV.UK pages on DBS checks for employers and for people applying for a role; mygov.scot on disclosure types; nidirect on AccessNI checks; the RCMP page on vulnerable sector checks; section 30a of the German Federal Central Criminal Register Act; vic.gov.au on the Working with Children Check; the FTC's guidance on using consumer reports; the NSOPW site. The reader's own legal adviser for the rules that apply to them.