Data and Security

A connected school platform brings useful information together. It should not make every record visible to every employee. Teachers, accountants, principals, parents, transport teams, and reception staff need different actions and data scopes. Role-based access control helps the institution translate those responsibilities into repeatable permissions. Give roles only the access they need The diagram shows examples, not universal policy. A teacher may need academic records for assigned classes, an accountant may need fee operations, a principal may need broader reports, and a parent should only access authorised children. Each institution must define its own roles and exceptions. ...

School software can hold student identity, guardian contacts, attendance, assessment, fee, staff, visitor, and transport information. A security review should therefore be part of vendor selection and renewal—not a final question after the commercial decision is made. No checklist guarantees security or compliance. It helps leaders ask consistent questions, collect evidence, and identify risks that need professional review. Review security in layers Look beyond a single certification or encryption statement. Identity, access, data handling, recoverability, monitoring, and response need to work together. ...