Security

Your school’s data, protected by design.

We take the security of your students, staff and finances seriously. edutal is built from the ground up with encryption, strict access control and tenant isolation — so your records stay private, accurate and yours.

Secure by default

Encryption, isolation and audit trails baked into every layer.

Encrypted PII HTTPS everywhere Least privilege Audited actions
How we protect you

Security woven through the platform

Practical, layered protections that keep your school’s information safe every single day.

Encryption at rest & in transit

Sensitive records are encrypted in the database and served only over HTTPS.

Role-based access control

Granular roles & permissions plus per-staff access — people see only what they should.

Strict tenant isolation

Every school’s data is isolated at the query layer; one school can never read another’s.

Full audit trail

Sensitive actions are logged with who, what and when for accountability.

Backups & reliability

Automated backups and resilient infrastructure keep your data safe and available.

Privacy by design

Data-minimising defaults and clear controls help you meet your data-protection duties.

Tenant isolation

One school can never see another’s data

Every record in edutal is bound to the school that owns it. Database queries are automatically scoped to the active tenant, so there is no path — accidental or otherwise — for one school to read, edit or even glimpse another school’s students, staff or finances.

  • Every query is scoped to the current school
  • No shared tables of sensitive records across schools
  • Access is enforced on the server, not just the screen
School A
Students
Staff
Fees
Results
School B
Students
Staff
Fees
Results
Walled off — no cross-tenant access
Our commitments

Built to earn your trust

The principles we hold ourselves to when handling your school’s data.

Encrypted PII

Personal information for students, guardians and staff is encrypted and handled with care.

HTTPS everywhere

All traffic is served over secure, encrypted connections — no exceptions.

Least-privilege access

People and services get the minimum access they need, and nothing more.

Audited actions

Sensitive changes leave a trail, so activity can always be reviewed.

Tenant isolation

Each school’s data is walled off from every other school on the platform.

Data-protection minded

We design with privacy and data-protection obligations front of mind.

Questions about security?

We’re happy to walk you through how edutal keeps your school’s data safe. Reach out for a conversation, or browse our help centre.

Book a demo