K–12 AI Governance & Safety Program

1 — Purpose and structure of this document

This is the single Statement of Work for all AIP engagements. Clauses 1–10 apply to every engagement and are identical whichever is selected. Schedules A and B then set out the scope, deliverables, milestones, acceptance criteria and fee for each engagement. Only the selected Schedule forms part of the agreement; the others are included so both parties can see exactly what was and was not bought.

Implement a practical, school-owned AI governance system covering policy, privacy, safeguarding alignment, stakeholder capability and ongoing governance cadence — measured on two axes reported separately and never averaged: Readiness (whether the institution can use AI well) and Governance (whether it can be responsible for it), together with a Practice measure of whether AI is yet serving teaching and learning.

2 — Engagement selected

One of the following is selected and its Schedule forms part of this agreement:

Each engagement is complete in itself. Where Client subsequently commissions a larger engagement, the fee already paid is credited in full and no work is repeated or re-charged.

3 — Nature of this Statement of Work

This is a deliverable-based (design/detail) Statement of Work. Provider is obligated to perform the specified method and produce the specified deliverables to the stated quality. It is expressly not a performance-based Statement of Work and contains no warranty as to outcomes.

The reason is structural rather than defensive. The outcomes a school ultimately achieves depend on decisions and resources that sit with Client and not with Provider — whether an owner is appointed and released, whether staff attend, whether leadership accepts a finding, whether a tool is withdrawn. Provider can measure those things honestly and say so; Provider cannot deliver them. A Statement of Work that promised otherwise would transfer to Provider a risk Provider has no means to control, and would create an incentive to report favourably on Client's own inaction — which would destroy the only thing this engagement is for.

Accordingly, acceptance in each Schedule is defined by deliverables produced and their evidenced quality, never by a score improving or a target percentage being reached.

4 — Internal Capacity Requirements (Client Responsibilities)

Each is a point at which the engagement stalls if unresourced. They are stated before signature rather than discovered after, and Schedule-specific additions appear in the relevant Schedule.

• One named contact for the engagement, with authority to convene.
• Timely provision of the evidence pack requested at kick-off — existing policies, logs, registers, agreements.
• Administration of the instruments within the agreed fieldwork window, with proctors briefed using the supplied guide.
• Publication of the privacy notice before any instrument opens.
• A named person able to confirm findings and a named person able to accept a risk.
• Review windows for DPO, IT and legal booked inside the agreed timeline.

Delay attributable to any of the above extends the timeline without penalty to Provider and does not alter the fee. Where a delay exceeds two weeks, either party may propose a revised schedule under §9.

5 — Out of Scope (all engagements)

• Legal advice or legal representation.
• Tool procurement or vendor negotiation.
• Technical deployment or configuration of vendor platforms.
• Bespoke curriculum design beyond the included activity library.
• Bespoke instruments; instruments are delivered as authored.
• Translation of instruments unless specified in the selected Schedule.
• Anything requiring access beyond what Client provides.
• Ongoing operation after the engagement ends — that is the School tier, quoted separately.

6 — Fees & Payment Terms (mechanics)

The fee and payment schedule for the selected engagement are stated in its Schedule. The following apply to all:

• All fees are in USD, fixed, and confirmed at signature.
• Invoices are payable within 30 days of issue.
• Travel and on-site expenses are excluded and billed at cost, agreed in writing with a cap before any on-site date is scheduled — not when a ticket is booked. Engagements delivered remotely incur none.
• Applicable withholding or local taxes are Client's responsibility and are not deducted from the agreed fee unless required by law, in which case Provider is notified before invoicing.

7 — Change Control

Any scope change requires a written change order defining additional deliverables, timeline changes and fee adjustment. Work does not begin on a change until the order is signed. Two review cycles are included on drafted documents; further rounds are billable and quoted before they begin.

8 — Data Protection, Confidentiality, and Legal Notice

Legal Notice: Governance templates and all deliverables produced under this engagement are operational implementation support. They are not legal advice and do not create an attorney–client relationship. Client is responsible for review by its own counsel and data protection officer before adoption.

Client owns all deliverables produced under this engagement from the moment each is delivered, irrespective of payment status. Provider retains ownership of its underlying instruments, templates and tooling; Client may continue using them after this engagement without further licence or fee. Nothing produced for Client is withheld, disabled or reclaimed for non-payment; unpaid fees are recovered as a debt, not by removing a school’s governance material.

Provider handles all data per contract terms and applicable regulation. Specifically:

• Anonymity. All surveys are anonymous by construction. Provider collects role, department or phase, and years of service — nothing that identifies an individual. Any subgroup with fewer than five responses is suppressed and never reported separately. This applies without exception, including at Client’s request.
• Retention. Raw response data is deleted 90 days after final handover. Delivered artefacts belong to Client; Provider’s working copies are deleted at the same point. Client may request the raw data at any time before deletion.
• Separation. Client data is held on Provider’s own equipment, encrypted at rest, never on a third-party analytics platform, and never combined with another institution’s data.
• Benchmark participation is opt-in, refusable, and refusal affects nothing else in this engagement.
• AI assistance. Where analysis or drafting is AI-assisted, Provider will say so and name the service. No identifiable student data is sent to any third-party AI service, and a named human reviews every finding before it reaches a deliverable.
• Breach notification in writing within 72 hours, stating what was affected.
• Instrument validation. The instruments used have not been externally validated or psychometrically tested. They support a structured management conversation and a defensible register. They are not a compliance certification, an accreditation, or a benchmark against a validated sector norm — no such norm exists for these instruments — and no deliverable may be represented as one.

Confidentiality obligations survive project completion.

9 — Correction, dispute and escalation

This engagement is sold on the premise that findings may be contested. A route for that is therefore part of the agreement rather than an afterthought.

• Factual correction. Where Client demonstrates a finding is factually wrong, Provider corrects it. Frozen artefacts — a dated baseline report — are never edited; a dated correction is issued alongside the original.
• Disagreement on interpretation. Where the evidence is agreed but its reading is not, both readings are recorded in the deliverable, attributed. Provider does not remove a finding because it is unwelcome, and does not overstate one because it is striking.
• Escalation. Unresolved matters are raised in writing to the head of school and Provider’s signatory. If still unresolved after 15 business days, either party may terminate under §10 with work completed to date payable and all delivered artefacts remaining Client’s.

10 — Term, termination and liability

• Term. From signature until final handover of the selected Schedule, unless terminated earlier.
• Termination for convenience. Either party on 15 business days’ written notice. Client pays for work completed and deliverables issued to that date; all such deliverables remain Client’s.
• Termination for cause. Either party on written notice for material breach not remedied within 15 business days.
• Limitation of liability. Provider’s aggregate liability under this agreement is limited to the total fees paid. Neither party is liable for indirect or consequential loss. Nothing here limits liability for fraud, wilful misconduct, or any liability that cannot lawfully be limited — including any liability relating to the safeguarding of children.
• Force majeure. Neither party is liable for delay caused by events beyond reasonable control. Affected milestones move by the length of the event.
• Governing law and forum. [Jurisdiction — to be agreed at signature]. To be completed before signature; do not leave blank.

Signatures

By signing below, both parties agree to the terms and conditions set out in this Statement of Work.