IMP Software gains 9ine certification for data privacy in schools
IMP Software has achieved Certified Vendor status from 9ine, a specialist consultancy in data privacy and protection within the education sector.
The certification acknowledges that IMP Software's suite of budgeting, purchasing and financial management tools for multi-academy trusts (MATs) and schools has met recognised international standards for data privacy, data protection, and cybersecurity.
Industry assessment
9ine, which is known for its work in education-sector data protection, cybersecurity, and artificial intelligence governance, carried out an independent expert assessment of IMP Software's products, policies, and technical controls. In its review, 9ine confirmed that IMP Software's practices are aligned with major regulatory frameworks such as the General Data Protection Regulation (GDPR), Family Educational Rights and Privacy Act (FERPA), Children's Online Privacy Protection Act (COPPA), the EU AI Act, and cybersecurity benchmarks including the Open Worldwide Application Security Project (OWASP) standards.
With this certification, schools and the MATs they operate within receive an independent assurance of IMP Software's compliance in handling sensitive data and maintaining robust privacy protocols. The certification is intended to facilitate procurement, reducing the need for extended internal reviews by providing externally validated due diligence and compliance documentation.
Organisational response
"We are delighted to receive this significant certification from 9ine. It is a clear reflection of our unwavering commitment to protecting MAT/school data, safeguarding privacy, and demonstrating responsible and ethical privacy governance. It is important independent verification of our practice around robust data privacy and protection governance specifically for educational technology. We hope this provides additional reassurance to our valued MAT and school partners, and underscores our promise to uphold the highest standards as part of our wider organisational customer commitments."
The certification allows current and prospective clients to view IMP Software's complete compliance assessments and due diligence paperwork through a dedicated portal established for transparency in the process.
Certification process
The 9ine certification process ensures that vendors undergo a comprehensive examination, assessing everything from technical safeguards and software design to the implementation of data privacy policies. By receiving certification, IMP Software aims to provide MATs and schools with confidence that the company's software solutions are subject to external checks covering legal compliance in both the United Kingdom and international regulatory environments.
Beyond the regulatory frameworks addressed, the review process looked at IMP Software's internal practices in areas of privacy governance and customer data management. This third-party assurance is designed to support procurement teams by expediting the compliance checks often required by educational institutions when evaluating new technology partners.
Background on involved organisations
IMP Software provides technology used by over 500 multi-academy trusts and 5,500 schools to support budgeting, forecasting, resource allocation, and procurement oversight. Its software suite includes IMP Planner, a tool to consolidate MAT budgeting, reporting, and real-time budget alignment; IMP ICFP, which assists in deploying staffing and resources to maximise educational outcomes; and IMP Purchasing, a system intended to structure purchasing processes and approval workflows across MATs.
9ine consults with educational organisations on issues of governance, risk management, compliance, and technology implementation. Its service portfolio includes supporting schools with their requirements in artificial intelligence, cybersecurity, data protection, and privacy regulatory obligations.
The recognition of Certified Vendor status for IMP Software by 9ine is intended to simplify the procurement journey for schools and MATs while reinforcing confidence in data protection practices involving educational technology providers.
