CE Readiness Scanner terms of service
EdTech Solutions Ltd provides the CE Readiness Scanner to its customers. RoarTech Ltd owns and licenses the software to EdTech and is the verified publisher of the Microsoft Entra application. These terms explain the app's intended use. The customer's signed service agreement with EdTech governs the commercial service, data processing, support and any agreed service levels; that agreement takes priority if there is a conflict.
Authorisation and access
An administrator authorised by the customer must approve the application's Microsoft Graph permissions in the customer's own tenant. Those application permissions provide tenant-wide read access, even where a portal user is viewing one school. The customer may review or revoke consent through Microsoft Entra. EdTech will stop new collection when consent is revoked.
What the service does
The scanner reads supported Microsoft 365 configuration and security signals, produces findings with evidence and collection dates, and helps staff prepare for Cyber Essentials and Cyber Essentials Plus assessment. Available checks depend on the customer's licences, enabled Microsoft services, granted permissions, data retention and agreed scope. A missing signal or empty incident list is not proof that the tenant is secure.
The scanner does not make configuration changes, remove threats, provide continuous monitoring or perform the external and device tests required for Cyber Essentials Plus unless a separate service agreement expressly covers those activities. Its output is not a certification decision or a guarantee against incidents. Customers should review findings with qualified staff and use their normal incident response process for urgent threats.
Customer responsibilities
The customer remains responsible for authorising access, defining which tenant and services are in scope, keeping its own administrator accounts secure, and deciding and implementing remediation. EdTech will show collection failures and unsupported checks as unavailable or needing review rather than as passed checks.
Data and changes
EdTech handles customer tenant data under the customer's service agreement and the scanner privacy statement. The application permissions and checks may change as the service develops; a customer administrator must approve any newly requested permissions before the scanner can use them in that tenant. EdTech may update these public terms, but changes to a signed customer agreement require the process set out in that agreement.
Contact
For questions about the service or these terms, email hello@edtechsolutions.uk.