Questions at several difficulty levels, straight from your own material.
New test variants do not get made because it is extra work, so the same ones circulate for years. The audit checks the quality of your material, how to guarantee a question really has one right answer, and how much reviewing that costs.
AI Workflow
An AI workflow can automate routine question generation and route exceptions to staff, cutting manual effort by roughly 60 percent.
The process is a strong candidate for an AI workflow: the core task of generating structured questions from text is well within the capability of current large language models, the rules for standard cases are clear, and volume is high enough to justify the investment. The recommended path is an AI workflow that drafts questions automatically for the 85-90 percent of standard cases and flags the remainder for human review, directly matching the client's stated goal of keeping people focused on exceptions. Because school IT is locked down and the team has no technical staff, the implementation must use a hosted, low-code AI platform that requires no local infrastructure and can be managed by a non-technical administrator. GDPR obligations around data on minors mean all data processing must be handled within a compliant, EU-hosted environment, and human sign-off on final question sets must be preserved as an institutional safeguard.
The client has no stated tech stack preference and operates within a centrally managed, locked-down school IT environment. The recommendation therefore favours a hosted, low-code AI workflow platform such as Microsoft Copilot Studio or a similar EU-compliant SaaS tool that requires no local installation, no developer resource, and can be governed by central IT policy.
Process Overview
Test question generation is the process by which teachers and school administrators turn existing teaching material into ready-to-use test questions at defined difficulty levels. A teacher identifies a need, selects the relevant source material, drafts questions manually, checks that each question has exactly one correct answer, and then passes the draft through a review and approval step before the final question set is stored and used. The whole cycle currently runs on email and spreadsheets, with no single system holding the end-to-end process. It happens several times a day across a team of roughly twenty teaching staff and one administrator, adding up to around 1,500 runs per year at an average of twenty minutes each.
The process carries two layers of constraint that shape any automation decision. First, the school operates within a centrally managed, locked-down IT environment with limited in-house technical capability, which rules out any solution that requires local installation, bespoke development, or ongoing developer support. Second, because teaching material may touch on information about identifiable minors, the process sits under GDPR with heightened care, and institutional policy requires that a human being remains accountable for every final question set before it goes into use. These constraints are not obstacles to automation; they are design requirements that the right solution must meet from the start.
Path Scores
Generating questions from structured teaching material is a well-defined language task that AI handles reliably. A low-code AI workflow platform fits the locked-down IT environment and non-technical staff. Human review gates for exceptions and final approval satisfy GDPR and institutional policy requirements.
A hybrid approach is essentially what the recommended AI workflow delivers once human review gates are added, so the distinction is narrow. A more formal hybrid with structured escalation workflows would add overhead that is hard to justify given the small team and limited IT capability.
Training staff to use AI tools directly for question generation is a realistic near-term option given the low technical bar of modern AI assistants. It would not achieve the same consistency or throughput as a workflow, but it is low-cost and could be deployed quickly as a first step or alongside the AI workflow.
RPA is suited to clicking through stable UI screens and moving structured data, not to generating natural language content from unstructured teaching material. It would handle none of the core generative task and would add fragile automation on top of an already inconsistent process.
A coded solution would require developer resource the school does not have, ongoing maintenance, and would still need an AI or NLP component to handle the generative task. The locked-down IT environment makes deployment and hosting additionally difficult.
A fully autonomous AI agent operating without human checkpoints is inappropriate here given GDPR obligations on data about minors and institutional policy requiring human accountability for assessment decisions. The added complexity is also disproportionate to the team's technical capacity.
The current manual process is the root cause of the problem: new test variants are not created because the effort is too high, and the same tests circulate for years. Staying manual perpetuates the quality and workload issues the client explicitly wants to solve.
Process Dimensions
Eight dimensions drive the recommendation, scored 0–10 with a note on each.
Teaching material is semi-structured text; it is not raw unstructured data but it is not a clean database either, which means AI handles it well but some pre-processing of source documents will be needed.
The rules for standard questions are clear enough to specify in a prompt or workflow template, though the 10-15 percent of exception cases involve genuine ambiguity that requires human judgement.
Exceptions at 10-15 percent of volume are manageable but not negligible, and they consume a disproportionate share of total effort, making a human review gate essential rather than optional.
School IT is centrally managed and locked down, making direct system integration difficult; a hosted SaaS platform that staff access via a browser is the most realistic integration path.
At 1,500 runs per year and 20 minutes each, the process consumes roughly 500 hours annually at a cost of around 22,500 GBP, giving a clear ROI case even for a modest automation investment.
The core task of generating questions from curriculum material is stable; the main variability is in the source documents themselves, which AI handles through prompting rather than hard-coded rules.
Standard cases require little judgement, but quality assurance, ambiguous questions, and institutional accountability for assessment decisions mean human oversight cannot be fully removed.
GDPR obligations covering data on minors and institutional assessment policy require that all data stays within a compliant EU-hosted environment and that a human approves final question sets before use.
ROI Estimate
£22,500
Current annual cost
60%
Estimated time saved
£13,500
Annual savings
7mo
Payback period
Current annual cost is calculated as 1,500 runs multiplied by 20 minutes divided by 60, multiplied by 45 GBP per hour, giving 22,500 GBP. A 60 percent saving reflects automation of standard cases while preserving human review for the 10-15 percent of exceptions; build cost range reflects a low-code SaaS implementation with no bespoke development at the low end and light configuration and integration work at the high end.
Implementation Roadmap
Map the exact format of source teaching materials, define the question templates and difficulty level criteria, and select a GDPR-compliant, EU-hosted low-code AI platform that central IT can approve. Key dependency is getting central IT sign-off on the chosen platform. Effort is light but requires one administrator and one IT contact.
Design and test the AI prompts that generate questions at each difficulty level from sample teaching material. Build the workflow logic that routes standard outputs for light-touch review and flags exception cases for full human review. Deliverable is a working prototype on real material.
Run the workflow with three to five teachers on live material, measure question quality, exception rate, and time saved. Collect structured feedback and refine prompts and routing rules. This stage validates the ROI assumption before wider rollout.
Conduct a data protection impact assessment covering the handling of any pupil-related data, confirm data residency and retention settings in the chosen platform, and document the human approval step to satisfy institutional assessment policy. Dependency is access to the school's data protection officer.
Roll out to all 20 teaching staff with a short practical training session focused on submitting material, reviewing AI-generated questions, and handling escalated exceptions. Provide a simple one-page guide and nominate the administrator as the first point of support.
Risks & Considerations
The most significant risk is data compliance: teaching material or question drafts that contain any information about identifiable pupils must never be sent to an AI model hosted outside a GDPR-compliant, EU-based environment. Choosing the wrong platform or allowing staff to use consumer AI tools as a workaround could create a serious data protection breach. A data protection impact assessment before go-live is non-negotiable, and the workflow must be designed so that pupil data is structurally excluded from AI inputs.
A secondary risk is over-reliance on AI-generated questions without adequate human review. If staff treat AI output as final rather than as a draft, question quality and the requirement for a single unambiguous correct answer may not be consistently met. The human approval gate must be a genuine check, not a rubber stamp, and this needs to be reinforced in training and in institutional policy. Finally, if central IT does not approve the chosen platform, the project stalls entirely; early engagement with IT and the data protection officer is the single most important dependency in the roadmap.
In partnership with AIRIES, the Swiss AI learning platform. These levels fit your result.
-
3
Corporate Applied Intelligence & AutomationTurn your own tasks into AI workflows, build reports and dashboards, set up a personal AI assistant.
-
1
Foundations of Applied IntelligenceHow AI works, prompting for everyday work, and your first mini AI project.
Level 3 (Corporate Applied Intelligence and Automation) gives the administrator the skills to build, manage and iterate the AI workflow without developer support, which is essential given the locked-down IT environment and small budget. Level 1 (Foundations of Applied Intelligence) is the right starting point for teaching staff who have not used AI tools at work, ensuring they can interact confidently with the workflow and review AI-generated questions critically. Together these two levels directly address the skills gap that currently makes manual effort the only option.
- Turning repetitive tasks into AI workflows
- Prompting AI for structured content generation
- Reviewing and quality-checking AI outputs
- GDPR-aware use of AI tools
The school administrator who will manage the workflow and the teaching staff who will interact with it daily.
Architecture Overview
Hover to zoom · click for fullscreen
Why This Approach
The recommended path is an AI Workflow: a hosted, low-code platform that takes teaching material as input, drafts questions at the required difficulty levels using a large language model, and routes the output through a human review gate before anything is approved for use. The case for this path rests on a straightforward match between what the process needs and what current AI tooling can reliably deliver. Generating structured, curriculum-aligned questions from semi-structured text is precisely the kind of language task that modern LLMs handle well. The rules for standard cases are clear enough to express in a prompt template, the volume is high enough to justify the investment, and the 10 to 15 percent of exception cases are handled cleanly by routing them to a human reviewer rather than asking the AI to resolve genuine ambiguity.
The school's technology situation points firmly toward a hosted SaaS platform rather than anything that requires installation or developer resource. Microsoft Copilot Studio is a strong candidate given that many schools already operate within the Microsoft 365 ecosystem, which simplifies both central IT approval and GDPR compliance through Microsoft's EU data residency commitments. Other EU-compliant, browser-based low-code AI platforms are viable if the school's IT governance points elsewhere, but the principle is the same: the tool must be accessible via a standard browser, governable by central IT policy, and hosted entirely within a compliant EU environment. No local infrastructure, no Python scripts, no ongoing developer involvement.
It is worth being direct about why the AI Workflow scores higher than the Hybrid path despite their surface similarity. The distinction between the two in this context is mostly one of framing. A well-designed AI Workflow already incorporates human review gates, so calling it a Hybrid adds no practical value and risks introducing a more elaborate escalation structure than a small, non-technical team can sustain. The AI Workflow recommendation is not a lights-out automation; it is a system where AI handles the drafting of the 85 to 90 percent of standard cases and humans handle everything that requires genuine judgement. That division of labour is what makes both the workload saving and the compliance position achievable at the same time.
The Education path, which would mean training staff to use AI assistants directly without a structured workflow, is a realistic near-term complement rather than a replacement. It could be deployed quickly and at low cost, and the AIRIES learning programme covers exactly the skills involved. However, it would not deliver the consistency or throughput that a workflow provides, and it would leave each teacher making individual decisions about which AI tool to use and how, which creates an unacceptable data compliance risk in an environment where consumer AI tools might become a workaround. Education is therefore positioned as a parallel investment that equips the administrator to manage the workflow and the teaching staff to review AI output critically, not as an alternative to the workflow itself.
RPA, Traditional Code, and AI Agent all fail for different but clear reasons. RPA cannot generate natural language content and would add brittle screen automation on top of a process that is already inconsistent. Traditional Code would require developer resource and local hosting that the school does not have and cannot easily acquire. A fully autonomous AI Agent without human checkpoints is ruled out by both GDPR and institutional assessment policy: there must be a human accountable for every question set, and that accountability cannot be delegated to an autonomous system. The only honest recommendation given all these constraints is the AI Workflow, and the tradeoff it requires, preserving human review rather than automating it away, is not a weakness of the approach but a deliberate and necessary design choice.
Comparing the Top Approaches
The two strongest paths here are AI Workflow and Hybrid, and in practice the gap between them is narrower than the labels suggest. The recommended AI Workflow already incorporates human review gates for exceptions and a final approval step before questions go live, which means it carries the essential features of a hybrid approach without the additional coordination overhead. A more formally structured Hybrid path, with dedicated escalation workflows and distinct human decision stages built around every step, would add process complexity that a small team with limited technical capability would find difficult to sustain. The AI Workflow wins because it keeps the human involvement where it actually matters, at the exception and approval stages, rather than distributing it across the whole process.
Education and upskilling via the AIRIES programme is a genuine alternative worth acknowledging, not a consolation option. If central IT approval for a hosted platform takes longer than expected, or if budget is constrained in the short term, training staff to use a compliant AI assistant directly for question drafting is a realistic interim step. It would not match the consistency or throughput of a structured workflow, and it places more cognitive load on individual teachers, but it builds the foundational skills that make the eventual AI Workflow adoption easier. The two paths are complementary rather than competing.
RPA, Traditional Code, and AI Agent all score poorly for reasons that are specific to this process rather than generic. RPA has no role in generating natural language content from semi-structured teaching material. Traditional Code would require developer resource and infrastructure the school does not have, and would still need an AI component to do the generative work. An autonomous AI Agent operating without structured human checkpoints is inappropriate where GDPR obligations covering data on minors and institutional accountability for assessment decisions are both in play. Staying manual perpetuates the exact problem the client wants to solve, so it is not a viable baseline.
How to Build It
The first practical step is getting central IT involved early, because everything else depends on it. The school needs to select a GDPR-compliant, EU-hosted low-code AI platform that central IT can approve and govern within existing policy. Microsoft Copilot Studio is a strong candidate here, partly because many schools already operate within Microsoft 365 tenancies, which removes a significant procurement and security review hurdle, and partly because it provides a low-code workflow builder that a non-technical administrator can manage without developer support. Other options worth evaluating include Make (formerly Integromat) connected to a compliant Azure OpenAI deployment, or a dedicated education-sector AI platform if the school's procurement framework includes one. The key criteria are EU data residency, no training on customer data, and browser-based access that requires no local installation.
Once the platform is approved, the implementation work centres on prompt and workflow design. A prompt template is built for each difficulty level, instructing the AI model to generate questions of a defined type from a pasted or uploaded excerpt of teaching material. The prompt includes explicit constraints: one unambiguous correct answer, no reliance on information outside the provided text, and a specific output format that matches the school's existing question structure. The workflow then routes the AI-generated output through two paths. Standard outputs, which are expected to cover roughly 85 to 90 percent of cases, go directly to a light-touch staff review screen where the responsible teacher confirms or edits the draft before marking it approved. Outputs flagged as exceptions by the AI, or caught by simple rule checks such as missing answer options or ambiguous phrasing, are routed to a separate review queue where a senior staff member applies full human judgement before the question is passed on.
The data flow is straightforward. A teacher submits a section of teaching material through the platform's input interface, which may be a simple web form or a Teams-integrated submission panel depending on the chosen platform. The platform sends the text to the AI model, receives structured question drafts, and writes them to a shared output store, likely a SharePoint list or a structured folder within the school's existing Microsoft 365 environment. No pupil data enters this flow at any point; the inputs are curriculum material only, and the platform's data residency settings ensure that content never leaves the EU-hosted environment. The administrator can monitor the queue, track approval status, and pull a weekly summary of volumes and exception rates without any technical intervention.
Staff training covers three practical skills: how to submit material and specify difficulty level, how to review AI-generated questions critically rather than treating them as final, and how to handle the escalation queue when exceptions arise. A single one-hour session with a one-page reference guide is sufficient for most teaching staff, with the administrator taking a slightly deeper orientation on managing the workflow configuration and monitoring outputs. The whole rollout, from platform approval to all twenty staff using the system on live material, is realistically achievable within thirteen to sixteen weeks, with the GDPR data protection impact assessment running in parallel during the pilot stage rather than as a sequential gate.
Risks in Detail
The most serious risk is data compliance, and it is non-negotiable. If teaching material or question drafts contain any information that could identify individual pupils, sending that content to an AI model outside a GDPR-compliant, EU-hosted environment constitutes a data protection breach involving data on minors, which carries significant regulatory and reputational consequences. The risk is not hypothetical: teachers under time pressure may reach for a consumer AI tool like the public version of ChatGPT as a workaround if the approved workflow feels cumbersome, and that workaround bypasses every control. The workflow must be designed so that pupil-identifiable data is structurally excluded from AI inputs, not just discouraged by policy. A data protection impact assessment before go-live is mandatory, and the school's data protection officer must be a named stakeholder in the project from the outset. If central IT does not approve the chosen platform, the entire project stalls, which makes early IT engagement the single most critical dependency on the roadmap.
A second, quieter risk is the quality assurance gap that opens up if the human review step becomes a rubber stamp rather than a genuine check. AI language models generate plausible-sounding questions reliably, but plausible is not the same as correct. A question with two defensible answers, or one that inadvertently relies on knowledge outside the source material, can pass a cursory review and cause real harm in an assessment context. This risk is manageable, but it requires deliberate reinforcement in training, in institutional policy, and ideally in the workflow design itself, for example by requiring reviewers to confirm a specific checklist item about answer uniqueness before approving. Over time, if question quality metrics are tracked, the school will also be able to identify whether particular subject areas or source material types generate higher exception rates and adjust accordingly.
Claude Code Starter
A scaffolded project ready to open in Claude Code. Unzip, open the folder, and Claude starts building immediately.
Claude Code Starter (.zip)
Your own assessment includes a ready-to-use project scaffold: CLAUDE.md, pyproject.toml, src/agent.py and .env.example. Open the folder in Claude Code and it starts building.