the policy version has a clear date

Desirable information, not core requirement according to the GDPR, this should be provided by the edtech vendor (when it comes to education technologies targeting students)