Leaving room
A teacher who uses AI to prepare a lesson or make feedback clearer is doing the job better. You do not want to shut that down, and shutting it down would not work anyway.
Agreements about AI use at school
The technology changes every month. Your decision-making does not.
See which AI tools teachers and staff actually use. Decide what fits your institution, bring those agreements to the moment people are working, and see where practice suggests taking another look.
14 days free, no credit card. Rolled out across your organisation within the hour.
"Awareness fades when you're busy. That's why we use BeeSensible." Debby Elfrink, Operations director, Speck Pompen
Your school 
Microsoft 365 Copilot Allowed 
ChatGPT Limited use 
Claude
Microsoft 365 Copilot Allowed ChatGPT Limited use Claude Gamma
Magister Allowed
Somtoday
Snappet
MagicSchool
SchoolAI No decision yet
Pupil name Parent meeting notes Support plan Student number Grade list
Your school Microsoft 365 Copilot Allowed Magister Allowed Somtoday Snappet
Pupil name
Parent meeting notes
Support plan
Student number
Grade list
Plus everything else that is running
Microsoft 365 Copilot Allowed Magister Allowed Somtoday Snappet No prompts stored. No tracking of teachers. Everything processed inside the EU.
What this is about
Education does not lack AI policy. It struggles to keep policy current.
A board can decide today that Copilot is fine, that ChatGPT is fine without pupil data, that assessment has its own rules and that one educational tool is approved. Clear enough.
But tomorrow a new tool is going round on TikTok. A teacher tries Claude. A learning support coordinator has a report tightened. A colleague finds something for recruitment. Someone logs in at home on a personal account.
The technology moves faster than a board can rewrite, communicate and evaluate its policy. Dutch sector body Kennisnet now says plainly that generative AI is everywhere in schools and advises making clear agreements about how pupils and staff use it.
Protecting pupil data
Support plans, placement advice, parent correspondence and report comments are about children, and sometimes about their health or home situation. Exactly the kind of text somebody wants rewritten quickly.
Being able to keep adjusting
There is no AI policy you can write that will still be right in a year. The question is whether you can keep learning while the technology, the usage and the teaching practice all move.
A policy that learns
In education, AI policy is never finished.
The question is not whether you can write one policy that is right. It is whether you can keep adjusting while something new arrives every month. That does not call for a thicker document, but for a round you can walk again.
See, decide, help, substantiate. And then again.
01 See 02 Decide 03 Help 04 Substantiate
01See
Which AI is being used?
Not only the applications IT holds a licence for. BeeSensible sees when AI tools are opened and shows, at organisation level, which ones appear, which are used heavily and which fade away again.
What is recorded is the tool, not what a teacher wrote in it.
- Which tools turn up on their own, without a request to IT?
- Where is usage growing, and where is it falling away?
- What share of usage runs through what you approved?
AI adoption
68%
81 of 120 seats AI-active this month
Prompts sent
1,596
22% vs previous 30 days
AI tools in use
7
2 newly discovered this period
Safe adoption
71%
of AI use via allowed tools
How often AI is used
Daily3428%Weekly3025%Occasionally1714%Not active3933%
Computed on-device and reported as anonymous counts, never per person.
What AI is used for
Analysis & knowledge354
Summarizing353
Writing communication258
Detections over timeLast 30 days
12,438+18% vs the previous period
Detections by platform
78% adjusted
8,124
81% adjusted
3,210
74% adjusted
812
Most encountered data types
4,212
2,930
1,486
1,104
612
SensitiveHighly sensitive
An impression of the AI tools catalogue. The tools and their risk scores come from the product's own catalogue; the verdict in the last column is your institution's to set.
The catalog
865 AI tools assessed for risk, and more arrive every week
You should not have to research a tool before you can decide about it.
Before you can decide anything about a tool, you need to know what it does with your data: where the vendor sits, whether it trains on what you type, whether incidents are known. We worked that out for 865 tools, and more arrive every week. What is left is the question only you can answer: is this allowed here, and under what condition?
The GDPR asks for a record of processing, NIS2 for a view of your suppliers, and the EU AI Act for demonstrable AI literacy. Because every observed tool is recorded with its vendor, hosting region and training policy, and carries a decision from your organisation, you can answer at any moment.
See the catalog-
Which tools are in use, and for what
Every observed tool is in the register, with vendor, country, hosting region, training policy and the kind of work it is used for.
-
Which of them fit your policy
One decision per tool: allowed, limited use, not allowed, or no decision yet. Nothing is silently approved; the decision is always yours.
-
What you do to uphold that policy
Anyone opening a tool you have decided something about sees it at that moment, right in the page. That the notice appeared is counted, without content and without a name, so you can show the mechanism actually reached people.
The overview does not establish that you comply with the law. It shows which measures you can substantiate with measurements, and which you cannot. The judgement stays with you.
02Decide
How much room do we want to give?
In education that is a better question than what is allowed. Per tool you see the vendor, the country, the data processing agreement, certifications, documented incidents, a risk score across six dimensions and a separate reading under the EU AI Act. The board records the decision.
“AI is allowed” is close to meaningless here: allowed for whom, for which assignment, with what data and towards which learning goal? Assessment has its own instruments for that, such as the Dutch Npuls AI fan, which sets out levels from no AI through to co-creation. BeeSensible does not enforce those teaching choices. It covers the part that plays out in everyday digital work.
- Allowed
- Fits our agreements, for staff.
- Limited use
- Use it, but not with pupil or student data.
- No decision yet
- Newly surfaced, not yet assessed.
- Not allowed
- Please use our own approved environment instead.
03Help More about document anonymisation
The teacher is not the problem.
A teacher who uses AI to prepare a lesson, tighten feedback or make a letter to parents clearer is trying to do the job well. At that same moment they are supposed to know which tool the school assessed, what information may go in and when anonymising is needed. That is a lot to carry from a policy document.
So BeeSensible shows the agreement when it becomes relevant, and marks sensitive data while someone types. No block, no automatic correction: the teacher decides whether to mask, remove or leave it.
BeeSensible notice
No decision yet No decision yet on SchoolAI
Your organisation has not made a decision on this tool yet. Do not share personal data or confidential business information here.
Use instead
Open Microsoft 365 CopilotAlso allowed: Snappet ·Magister
Continue anyway
Only enter public information here
BeeSensible notice
Not allowed SchoolAI is not allowed here
Your organisation does not allow this tool for work. Use an allowed alternative.
Use instead
Open Microsoft 365 CopilotAlso allowed: Snappet ·Magister
Hold to continue anyway
BeeSensible notice
Limited use SchoolAI is allowed here, with limits
Your organisation allows this tool with limits. Only use it with anonymised data.
Use instead
Open Microsoft 365 CopilotAlso allowed: Snappet ·Magister
Hold to continue anyway
GeminiDefault1 / 3Draw box
Support plan - school year 2026/2027
Concerning Sam Verhoeven, born 14 May 2013, national ID 284619375, living at Kastanjelaan 27 in Zutphen.
Contact with the parents runs through [email protected] and 06-24819053. Since November, Sam has been on an adjusted timetable.
9 items will be removedPreviewAnonymise (9)
04Substantiate
Learn from what happens next.
Is the preferred tool actually being used? Are notices acted on? Do new applications keep appearing that nobody has decided about? Are certain kinds of sensitive data recognised strikingly often?
What you see there can be reason to adjust the policy, the communication, the training or the alternative you offer. And then the round starts again. Putting a measure in place is, after all, a different thing from knowing whether it works: boards tend to report at length on what they did, and far more briefly on whether it helped.
Warnings about tools
Shown the moment someone opens a tool you have not decided on, or have limited or disallowed. About the tool itself, not about what gets typed into it.
148
warnings shown
61%
chose an alternative
Not allowed52 times
38 alternative9 held through
Limited use44 times
21 alternative15 held through
No decision yet52 times
31 alternative14 clicked through
alternative openedcontinued anyway
Browser use only. Counted at most once per tool per day. Group figures only, never who.
Sent despite warning
1,120
Detected, not adjusted, and still sent.
Critical sent despite warning
214
14% of critical detections
OutcomesLast 30 days
9,702
adjusted before sending
78% of 12,438 detections
Masked7,428(60%)
Removed2,274(18%)
Sent despite warning1,120(9%)
No action recorded1,616(13%)
Accountability GDPRNIS2
- Substantiated
Data minimisation at input
Sensitive data marked and handled before sending
- Substantiated
Register of AI services
Vendor, classification, and a decision per tool
- Partial
Appropriate technical measures
Detection active on the supported applications, handling still below the norm
- Not substantiated
Personal data breach notification
BeeSensible provides the signal, not a reporting process to the regulator
A Thursday at school
Risk rarely looks like risk.
08:35
Form tutor hour
A tutor has AI make a report comment friendlier. The pupil's name and the reason for concern are still in there.
11:20
Support team
A coordinator asks a chatbot to summarise a support plan for a meeting. The whole plan goes along.
13:50
Department
A teacher tries a new tool for lesson material that came past yesterday. Nobody has assessed the vendor.
16:40
At home, after school
One last letter to parents gets finished on a personal account, because the school laptop was already shut.
Nobody here is deliberately dodging the protocol. They are finishing their work. Good policy therefore helps at the moment of choosing, not only in a document on SharePoint.
The rules you already sit inside
Regulation where it actually bites, not as decoration.
GDPR
Data about minors
Report comments, support plans and parent correspondence are about children, and sometimes about their health or home situation. Exactly the kind of text a teacher wants rewritten quickly.
BeeSensible marks that data while someone types. The teacher decides what happens to it; we do not keep the text.
EU AI Act
AI literacy, and the tools themselves
People who work with AI need to know what it does. In Dutch vocational and higher education, Npuls works that out as a continuous learning culture, with experimenting, reflecting and improving as a standing round.
BeeSensible is not a training. Training teaches people what responsible use is; BeeSensible helps at the moment they have to apply it. The catalogue also carries an EU AI Act reading per tool.
Cybersecurity law
Only where it applies
Since 15 August 2026 the Dutch Cybersecurity Act applies to designated organisations, including funded universities and universities of applied sciences. It does not apply generically to primary, secondary or vocational education.
If your institution is in scope, BeeSensible supplies figures on actual AI usage and on what happens after a notice. If it is not, this simply is not your framework.
The question that always comes
Getting sight of it without tracking the teacher.
“So to know how AI is used, you are going to record what my teachers type?”
No.
The temptation is to log user activity and prompts centrally. For an educational organisation that immediately raises new questions about staff privacy, and possibly about pupil information too. BeeSensible deliberately takes another route.
The full story in the Trust Center- The dashboard does not need to know that Ms Jansen asked ChatGPT something about a pupil at 13:42.
- It needs to know that ChatGPT is used, what status that tool has, which kinds of sensitive information are recognised regularly, and what usually happens after a notice.
- That is enough to improve policy, and too little to confront anyone with.
- The usage data holds no user id. There is nowhere it could be written.
- The text is checked in working memory on our EU servers and discarded at once.
How it is put together
One process, four parts.
The first three can be bought on their own, so you can start with one.
Before you look further
The questions people ask first.
Does BeeSensible also see what pupils and students do with AI?
Only on devices and in browsers where it has been rolled out. On a school laptop or in a managed browser you see the usage; on a personal phone or laptop you do not. We will not pretend this gives you the full picture of pupil AI use, because it does not.
Can we see which teacher got a marking?
No. For markings, documents and notices, who it was is not recorded, so it cannot be looked up afterwards either. The dashboard has no per-employee view of any kind. At most the department is stored, and only if you switch those insights on, with a minimum group size.
Does BeeSensible block AI tools?
Never. It also never changes what someone wrote by itself. Your colleague sees what was found and what your organisation decided about that tool, and chooses. If something was sent anyway despite a marking, that gets counted, without content and without a name.
Does BeeSensible decide which AI is allowed in assessment?
No. That is a teaching and examination choice, and education has its own instruments for it. BeeSensible covers the part that plays out in everyday digital work: which tools are used, what verdict attaches to them, and where sensitive data comes into play.
What does a teacher notice?
Little, until it matters. Open a tool you have decided about and the decision appears with the reason behind it. Type sensitive data and it gets a marking they are free to ignore. Nothing is ever blocked and their text never changes by itself.
Where does BeeSensible run?
On our own servers at European providers: the application and the database at Scaleway in Amsterdam, the models at Hetzner in Germany. European companies rather than a European region of an American cloud, so there is no US parent that can be ordered to hand data over. The text is checked there in working memory and discarded straight after. What reaches the dashboard are counts and attributes, never content.
How much work is the rollout?
Not much. No proxy, no change to your network. The extension runs in Chrome and Edge and deploys centrally through Intune; the desktop app installs silently in the background. With a managed rollout your organisation is up inside an hour.
Does this replace our AI training?
No, and that is the point. Training teaches people what responsible AI use is. BeeSensible helps three weeks later, on a Friday at 16:40, when someone is finishing a report comment. They do different jobs and sit well next to each other.
Will works councils or staff representatives have views on this?
That is for your own organisation to judge. What we can say: there is no per-employee view, who did something is not recorded, and reporting is counts and patterns. We supply the material for that conversation.
Start by seeing
Your AI policy does not have to predict every new tool.
It has to move with what actually happens. See which AI tools are coming up in your organisation, make choices about them, and bring those choices back to everyday work.
14 days free, no credit card. Rolled out across your organisation within the hour.
