Skip to main content
U‑Clic™
Create your U‑Clic

Trust centre

Your record. Your control. Clearer trust.

Plain-English explanations of what U‑Clic is, how information is protected and where responsibility sits.

1. What U‑Clic is—and is not

U‑Clic is a digital work and learning passport. It is not a government-issued travel passport and it does not automatically prove legal identity, immigration status, right to work, DBS status, professional registration or fitness for a specific role.

2. User control

  • The person decides what information to add.
  • The person can see which records are self-declared and which are verified.
  • The person chooses what to share, with whom and for how long.
  • The person can withdraw a share where technically and operationally possible. A recipient may already have acted on information seen during a valid share period.
  • The person can review sharing and verification history.

3. Verification clarity

Status is always shown in words and with an icon, never by colour alone.

  • Self-declared

    Entered by the person. Not independently checked.

  • Evidence uploaded

    A document has been attached but not yet confirmed by an issuer.

  • Verified by issuer

    Confirmed by a named trusted organisation, within a stated scope.

  • Expiring soon

    Verified, but the expiry date is approaching.

  • Expired

    The stated validity period has passed.

  • Superseded

    Replaced by a newer record.

  • Revoked

    Withdrawn by the issuer, with a recorded reason.

4. Data minimisation

Collect and reveal only what is necessary for a stated purpose. Share packs are built item by item, and standard views exclude contact details, accessibility preferences and private notes.

5. Security principles

  • Secure sign-in with multi-factor authentication.
  • Encryption in transit and at rest.
  • Role-based access controls.
  • Secure, time-limited sharing links.
  • Event logging and audit trails.
  • Protection against bulk extraction and unauthorised access.
  • Regular security testing and incident management processes.

6. UK data protection

U‑Clic should be designed and operated in line with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018. Before launch, obtain specialist legal, data-protection and safeguarding advice, complete the appropriate governance documentation, and ensure the operating model reflects the final processing activities.

7. Children and young people

  • Age-appropriate design.
  • Privacy-first account defaults.
  • Clear explanations in plain English.
  • School and parent/carer guidance.
  • Consent and safeguarding mechanisms to be determined with legal and education-sector advice.
  • No targeted advertising and no sale of personal data.
  • No use of pupil records for automated high-impact decision-making.

8. Responsible AI

  • AI may help a person organise or summarise their own records.
  • AI must not make employment, education, safeguarding, admissions, competence or eligibility decisions.
  • All meaningful decisions remain subject to human review.
  • AI-assisted outputs are clearly labelled.