Skip to content
Education

Every merge approved. Every release traceable. Learners' data under your control. All inside your own boundary.

Your digital teams deliver services for schools, families and teachers faster without loosening a single control. AI agents do the routine work, and every step lands in a record your data protection, security and audit teams can read.

For digital, engineering, platform, security and data protection teams at ministries of education, exam and qualification bodies, student finance agencies and their suppliers, in the UK, Ireland, the EU and the US.

Why it slips today

Where the hours and the risk go.

91%
Of higher education institutions reported a breach or attack
In the UK government's Cyber Security Breaches Survey 2025, 60% of secondary schools, 85% of further education colleges and 91% of higher education institutions reported one in the previous 12 months.
28%
Of central government systems were legacy
The UK's State of Digital Government Review in January 2025 found 28% of central government systems were legacy, and 25% of respondents had a critical outage in 2024.
1 in 5
Organisations had a breach involving shadow AI
In IBM's 2025 study, one in five organisations had a breach involving AI tools staff use without approval, adding about $670,000 to the average cost.
Engineers use AI tools on their laptops that nobody approved, and code touching pupil data leaves your control.
Changes are approved in one tool, built in another and deployed from a third.
Evidence for audits and data protection impact assessments is gathered by hand.
An outage on results day or before an admissions deadline lands on families and schools at once.
Use cases

Your AI agents take the routine work, your people keep the decisions.

Sensitive records kept inside

Learners' data, safeguarding records and unpublished exam papers stay in your installation. When your AI agents run on your own models, none of it reaches an AI company.

No training on your data

JuhJuh trains no AI models of its own, and the open-weight models inside your boundary run under your control. Pupils' and teachers' work is never used to train a model by JuhJuh.

People decide about learners

AI agents never make a decision about a learner, a school or an exam result. They prepare the facts for the person who decides.

Ready for results days and deadlines

The SRE on-call AI agent opens the incident, finds the release behind it and has the rollback ready for one tap, so services stay up when families need them.

Evidence for GDPR, Children's Code, FERPA, COPPA

Access by role, retention per channel and a record of who did what support your GDPR and DPIA work, the Children's Code, FERPA and COPPA.

Every change reviewed, then approved

A reviewer AI agent on a different model checks every acceptance criterion, and a person decides the merge. Ticket, review, build and release sit in one record.

Builds from your approved libraries

Mirrored copies of the open-source packages you approve sit inside your boundary, and updates arrive as reviewed changes.

Incidents with a timeline

Every incident has its timeline written as it happens, so your incident manager starts a possible 72-hour breach report from the facts.

Before and after

The same week, with JuhJuh.

SituationThe school admissions service fails at 2:10am, a week before families receive offers.
Before

Alerts arrive from separate tools, and the on-call engineer works out the cause across chat, phone and spreadsheets.

After

The SRE on-call AI agent opens the incident, finds the release that caused it and sends the on-call engineer a voice note. She approves the rollback with one tap, and the service is healthy by 2:31am.

SituationInternal audit asks for every change to the exam results service last quarter.
Before

Engineers spend days gathering approvals, builds and release notes from several tools by hand.

After

The compliance evidence AI agent assembles the record by 5pm, and the head of engineering signs it off.

SituationA data protection team has ruled out AI coding assistants because code touching pupil data would leave its control.
Before

Engineers go without AI help, or use unapproved tools nobody can see.

After

JuhJuh runs in the department's own cloud account with open-weight models beside it. Engineers get AI help inside the boundary, and nothing about the data rules changes.

Who it is for

Every role gets time back.

Chief information officer and chief technology officerFaster delivery across every team, with one standard and one record.
Chief information security officerAI kept inside your boundary unless your rules allow a public model, access through your own sign-in and a record of every action.
Head of engineeringEvery change built to the same standard, whoever or whatever wrote it.
Platform, DevOps and site reliability engineersPipelines, releases, alerts and on-call in one place, with the routine work done for you.
Software engineersTickets turned into reviewed, tested changes, with your time spent on design and judgement.
Data protection officer and senior information risk ownerLearners' and staff data kept in your installation unless you choose to let it out, access by role and a record of who did what.
Policy and service ownersServices for schools, families and teachers delivered in smaller, safer releases.
Internal audit and assuranceChange, incident and access evidence ready when you ask for it.
Procurement and vendor managementOne platform to assess instead of a dozen AI tools.
Control and where it runs

A person approves anything consequential.

What your AI agents never do on their own

  • Make a decision about a learner, a school or an exam result.
  • Merge a change. A person decides, after a reviewer AI agent on a different model has checked it.
  • Deploy to production, roll back or change production settings, access or secrets without a person's approval.
  • Send anything outside the organisation beyond the answers you've approved in advance.
  • Use an AI model your rules haven't approved.
  • Decide whether to report an incident to a regulator. Your incident manager decides.

Self-hosted in your own cloud account

JuhJuh runs as your own installation, usually in your own cloud account in the region you choose, or in your own data centre. Open-weight models from the Mistral, DeepSeek, GLM and Kimi families run inside it, so learners' data and your sensitive work stay in your boundary.

Run it connected, reaching only the outside services you choose and public model families such as Claude, GPT and Gemini only where your rules allow, or fully air-gapped with no connection to the public internet. Nothing leaves your boundary unless you connect it or a person approves it.

Bring AI to your digital services, safely.

Start with one or two teams, and add the rest when you're ready. That's the juju.

JuhJuh uses cookies

We use essential cookies to run the site, and optional analytics cookies to count visitors. We set no advertising or marketing cookies. Only essential cookies are turned on by default. Cookie Policy

Essential

Required for the site to function

Analytics

A first-party visitor ID, so we can count returning visitors. Not shared with anyone.