AI is everywhere.
Even more so, we need to put people first.
What's your school's AI readiness?
We score where your school sits across strategy, data, governance, and guardrails, then hand you a roadmap built on what's working at schools like yours. Privacy Act ready. Essential Eight aligned.
EDUtech 2026
3–4 June 2026 · Halls 5 & 6, ICC Sydney
Drop by for a live demo of AI-safe school operations, and meet the team behind the partnership.
Indigenous-led AI strategy and governance for Australian schools, culturally informed, Privacy Act aligned.
What We Cover
Everything under one roof.
Build Trust through Certification.
We use AI to map your compliance gaps, build tailored policies, and maintain audit-ready documentation year-round. Your school stays aligned with Australian privacy and data protection regulations.
- NSW Cyber Security Policy Mandatory Requirements
- Australian Cyber Security Centre's Essential Eight
- ISO/IEC 27001 Information Security Management Systems
- Payment Card Industry Data Security Standard (PCI DSS)


Aligned with NSW Education Standards Authority requirements and the ACSC Essential Eight framework, the Australian Government's baseline cybersecurity controls for schools.
Gap Assessment
Identify compliance gaps
Policy Review & Builder
Update & generate school-specific policies
Certification & Audit Ready
Continuous compliance for ISO 27001, Essential Eight and others
The Risk to Student Data is Real
Schools are already being targeted[1]
ASD says malicious cyber actors frequently target the education sector, including recent incidents involving independent schools. Schools handle highly sensitive information every day, student records, family contacts, welfare notes, health information and payment data. When that information is exposed, schools can face urgent response obligations, disruption, parent scrutiny and lasting damage to trust.
Government-mandated cyber security
Requires all NSW Government departments and agencies to implement the NSW Cyber Security Policy, to ensure an integrated approach to preventing and responding to cyber security threats.[1]
ASD assists AISNSW in discovery of malware
A not-for-profit organisation in the education sector was alerted to malware lurking on their system. Gootloader malware had been detected on one of their devices, an 'Initial Access as a Service' tool used to distribute other forms of malware.[2]
Victorian Education Department student data breach
Hackers accessed names, email addresses and encrypted passwords of current and former students at all Victorian government schools. The education department identified the point of the breach and put safeguards in place.[3]
What's Covered
Everything your school needs. One platform.
Cyber security, data protection, IT management, and AI governance, schools face the same threats as enterprise. Now they have the same level of protection.
Cyber Hygiene Report
Identify and address gaps in your school's security posture.
All services available together under one annual subscription.
Our EDUTech 2026 Partners
Stronger together for Australian schools.
We're bringing the full network to EDUTech, strategic, technical, and classroom-ready partners working in concert so your school can adopt AI safely and scale what works.

Australian Indigenous AI Solutions
Indigenous-led AI strategy and governance for Australian schools. Together we deliver AI consulting that's culturally informed, Privacy Act aligned, and grounded in Indigenous data sovereignty principles, so AI at your school respects every community it serves.
From Schools Like Yours
Schools and organisations we have partnered with.

“It is with great confidence and appreciation that I endorse the work of Adrian Robertshaw and Bobby Aitkens for their outstanding contribution to our AI transformation journey at BHP. Over the course of our engagement, they played a fundamental role in guiding the strategic direction and ethical deployment of AI within our Safety division. Their commitment to operational excellence and innovative thinking helped us navigate complex challenges while ensuring that AI solutions were scoped with purpose, integrity, and measurable impact. Their approach—grounded in industry expertise, collaborative problem-solving, and a strong ethical foundation—has influenced the way we think about AI across frontline operations, safety culture, and leadership. Their efforts have contributed meaningfully to our broader vision and strategy to transform safety through technology and innovation. I commend Adrian and Bobby for their integrity, vision, and delivery capability, and I look forward to their continued involvement as we deepen our AI capabilities across the group.”
BHP
Johan van der Merwe, Head of Safety – Global Safety · BHP
via Australian Indigenous AI Solutions“It is with great confidence and appreciation that I endorse the work of Adrian Robertshaw and Bobby Aitkens for their outstanding contribution to our AI transformation journey at BHP. Over the course of our engagement, they played a fundamental role in guiding the strategic direction and ethical deployment of AI within our Safety division. Their commitment to operational excellence and innovative thinking helped us navigate complex challenges while ensuring that AI solutions were scoped with purpose, integrity, and measurable impact. Their approach—grounded in industry expertise, collaborative problem-solving, and a strong ethical foundation—has influenced the way we think about AI across frontline operations, safety culture, and leadership. Their efforts have contributed meaningfully to our broader vision and strategy to transform safety through technology and innovation. I commend Adrian and Bobby for their integrity, vision, and delivery capability, and I look forward to their continued involvement as we deepen our AI capabilities across the group.”
BHP
Johan van der Merwe, Head of Safety – Global Safety · BHP
Free self-assessment
How ready is your school for AI?
Twelve questions for your role across governance, security, privacy, and classroom practice. Get an instant scored readiness report, about two minutes.
Take the assessmentFAQ
Questions we hear a lot.
The Essential Eight is a cyber security framework developed by the Australian Cyber Security Centre (ACSC). It sets baseline controls to protect against common threats, and is increasingly expected for schools handling sensitive student and staff data.
Most schools reach Maturity Level 1 within 8–12 weeks. Zavior handles the gap assessment, remediation roadmap, and ongoing monitoring so your team doesn't need to lift a finger.
For most K–12 schools, Maturity Level 1 or 2 is appropriate. Zavior will assess your current posture during the discovery call and recommend the right target level for your school's needs.
Self-assessment is sufficient for most schools. However, when a formal third-party audit is required, Zavior works directly with your chosen auditor. If you don't have one, we can recommend trusted partners we've worked with. Our evidence preparation, documentation, and reporting are structured to align with the standards expected by notable Australian and international auditors, so you walk in ready.
Non-compliance can affect cyber insurance claims, increase regulatory scrutiny under the Privacy Act, and expose the school to reputational risk. Zavior helps you stay ahead of these obligations.
Not at all. Zavior is designed to work alongside your existing IT staff, not replace them. Your internal person can focus on day-to-day operations while Zavior handles the specialist domains of cyber security, compliance, and AI governance that typically fall outside a generalist IT role.
Yes. We coordinate directly with your consultant and agree who owns what up front, so you are not paying two parties to do the same work. Most of our engagements run this way.
Zavior complements your internal compliance function rather than duplicating it. Your compliance officer can focus on policy and governance while Zavior provides the technical implementation, ongoing monitoring, and evidence collection needed to maintain certifications like Essential Eight and ISO 27001.
Zavior works directly alongside your chosen auditor throughout the certification process. We prepare all evidence, documentation, and compliance reports in a format structured to meet the standards expected by notable Australian and international auditors. If you don't have an auditor yet, we can recommend trusted partners we've worked with, making the process smoother from start to finish.
No. Zavior integrates with your existing systems and works alongside what you already have in place. We assess what you have during the onboarding consultation and build around it.
Depending on the services, we start by understanding your current infrastructure and setup. Certifications like Essential Eight and AI Governance begin with a discovery call, while IT Managed Services are configured to work alongside your existing infrastructure and setup.
No lock-in. Zavior is an annual subscription. You can cancel before the next renewal period. We'd rather earn your school's trust every year.
We can work alongside existing providers, or take over fully, whatever makes sense for your school. We'll assess what you have during your free consultation and recommend the right scope.
One person can't cover cyber security, compliance management, IT infrastructure, staff training, AND stay up to date with the Privacy Act, all at once. Zavior is an entire team for a fraction of the cost of a single part-time hire.
Hardware and software monitoring, remote helpdesk support, server and firewall management, and proactive maintenance, keeping your school running without disruption.
Either. Zavior can work alongside existing providers or take over fully. We'll assess your current setup during onboarding and recommend the right approach.
We prioritise issues based on urgency. Critical issues impacting school operations are handled with priority response during business hours, with clear SLAs outlined in your plan.
Yes. Zavior manages identity, access control, email security, and admin configurations across both platforms to keep your school's environment secure and well-governed.
Yes. Through our partnership with Digitally Driven (a Google for Education partner) Zavior provides cyber security-aligned recommendations for devices and tools appropriate for your school. Where required, Digitally Driven can also assist with procurement activities.
Students and staff are already using AI tools daily. Without governance, schools risk data leakage, policy violations, and Privacy Act breaches. Zavior helps put the right guardrails in place before issues arise.
No. AI governance covers a broad range of tools including ChatGPT, Google Gemini, Microsoft Copilot, and other AI-enabled platforms used across the school network.
Yes. Together with our partner Aona AI, the setup covers policy creation, staff training, and enforcement of policies through Azure Entra ID and SSO, ensuring the right controls are in place across your school's environment.
While not explicitly mandated yet, AI tools that process student or staff data fall within Privacy Act obligations around data handling and consent. Zavior's AI governance framework ensures your school stays ahead of regulatory expectations.
Shadow AI refers to AI tools used by staff or students without IT or school leadership's knowledge, think personal ChatGPT accounts, browser extensions, or third-party tools. These can inadvertently expose student data, staff information, or confidential school documents. Through our partnership with Aona AI, Zavior can detect and inventory Shadow AI usage across your school network.
Through Aona AI's security guardrails, policies are automatically enforced to redact or block sensitive information (such as student PII, staff records, or confidential documents) from being submitted to external AI tools like ChatGPT or Copilot. Staff are guided toward secure practices in real time.
Yes. Aona AI includes a real-time AI coaching capability that provides in-context guidance, role-specific training, and best practices as staff work, helping them understand what's allowed, what's not, and how to use AI effectively and ethically in their day-to-day tasks.
Get Started
Get Your Assessment.
Tell us about your school and we'll come prepared. EDUTech 2026 visitors get a free 30-minute assessment with our team, no hard sell, no commitment, just a clear next step.

