Pseudonymisation
Schoolbox uses pseudonymisation to reduce the identifying information sent to an external AI provider, such as OpenAI or Azure, when generating Differentiation Profiles.
The process replaces detected names and selected identifiers with substitute values called “tokens”. Information about the student’s learning and support needs remains available to help generate a useful profile.
Pseudonymised information is still private information. Names that are not detected, and other details within a record, may still identify someone.
How Schoolbox identifies personal information
Schoolbox combines known information from school records with automated detection.
Known-person matching uses available details for:
- The student: full, first, preferred and last names, student identifiers and date of birth.
- The student’s parents: names available through SIS contacts and linked Schoolbox parent accounts.
- People directly linked to the submitted pastoral records: authors, people who last modified the records, individually listed users with visibility, and other students involved through linked records.
Matching covers different written forms, including capitalisation, reversed name order, underscores and joined names. For example, it can match Alex Morgan, Alex_Morgan, AlexMorgan and Morgan, Alex.
Automated detection uses Presidio (originally developed by Microsoft) to help identify other names, locations, phone numbers, email addresses and Australian Medicare numbers in the prepared text.
What content is included?
- Confidential content is excluded. The Confidential tab and confidential attachments of a Pastoral Care record are not included in this process.
- General content may be included. General text and supported general attachments from records contributing to the profile can be used.
- Supported attachments include PDF, DOCX, DOC and ODT files. Unsupported files and attachments with no extractable text, such as image-only scans, are skipped. If a supported attachment cannot be read, generation stops and staff are asked to resolve the problem.
What are the limitations?
Schoolbox does not guarantee that every name or identifier will be removed.
Known-person matching depends on the details available in Schoolbox and the SIS. Other people mentioned in the text, including external practitioners, may rely on automated detection. Spelling differences, unfamiliar names and identifying details in the surrounding text can affect coverage.
Matching may also replace ordinary words that are someone’s name, such as “May” or “Young”. This can reduce the clarity of some content.
The AI provider still receives sensitive information about the student’s learning and support needs. Staff should include only relevant information, avoid unnecessary personal details and review the generated profile before using it.
What do schools need to do?
Schools need to configure their connected AI service to meet their privacy requirements. This includes ensuring submitted information is not used to train AI models, and reviewing:
- How long information is retained.
- Who can access it.
- Where it is processed.
These controls depend on the provider, service and account arrangements. Schoolbox’s pseudonymisation process does not configure or replace them.