Any vendor claiming ISO 27001 or PCI-DSS Level 1 certification, Compass Education included, should be able to produce current, dated certification evidence on request rather than a general assurance statement. A useful due diligence exercise is to ask every vendor on a shortlist for that evidence side by side. A vendor that can produce an up-to-date certificate on request has clearly built the audit process into how it runs the business; one that cannot has usually not been through that audit at all.

Read more from school management software.

There is a fair counter-argument, and it is worth naming. More modules can mean more to learn and more to configure, and a school that only needs the basics might feel a broad platform is more than it wants. The answer is that flexibility should let you start small. The presence of forty modules does not oblige you to run forty; it means the tenth and twentieth are there when you need them, without changing systems.

More information is available at Chronicle.

Parent experience sits over both. Independent school families are, in effect, paying customers, and they judge the school partly on how easy it is to pay, book and stay informed. One app that covers notices, compass.education consent, billing and catering feels professional. Three logins for three tasks does not. Look for a single parent-facing account that carries all of it.

Security is the third reason to move. A spreadsheet emailed between offices is hard to control and easy to lose. A proper MIS keeps records behind role-based access, holds an audit trail, and backs data up centrally. For a trust handling sensitive records at scale, that governance is not optional.