AI Training & Implementation for UK Schools and Businesses

Yes. Orion Forge operates as a Data Processor under the UK GDPR. Before any project begins, we put a Data Processing Agreement in place that defines exactly how your data is handled, who can access it, and how long it is retained. We can have this to you within 48 hours of engagement.

No. Your business data is never used to train any AI model. We use commercial API agreements with providers such as Anthropic (Claude) and OpenAI that prohibit training on customer data. This is documented in our sub-processor disclosure, available on request.

We work with a curated set of tools including Anthropic Claude, OpenAI, n8n, Make, and Airtable depending on your needs and existing stack. All third-party tools we use are disclosed to you before the project begins, and we will not add any tool to your system without your written agreement.

We build to a defined brief and test every automation before handover. Once live, you operate the system as the Data Controller — meaning final decisions and outputs remain your responsibility. Our Terms of Service set out our liability scope clearly, and we walk through this with every client before we start.

Likely yes — particularly if we are processing personal data (customer or employee data) through your systems. We will flag this during the AI Readiness Assessment and can point you toward the specific sections your policy should address, though we recommend your solicitor reviews any final changes.

A structured session — typically 90 minutes — where we review your current workflows, data, tools, and pain points. You receive a written report covering: where AI can add value, what changes are needed, estimated time savings, and a prioritised implementation roadmap. This is a paid service and can be credited against any project we subsequently build for you.

A DPA is a legal contract between you (as Data Controller) and Orion Forge (as Data Processor) that sets out how personal data is handled on your behalf. If any personal data flows through the systems we build — which it almost always does — a DPA is a legal requirement under UK GDPR. We provide a standard DPA template and can have it countersigned before work begins.

Our retainer covers: monitoring of all live automations, rapid response when something breaks, monthly performance check-in, minor adjustments as your needs change, and priority access when you want to add new functionality. Pricing is agreed at the point of engagement based on the complexity of what we have built.