Why Data Security Matters for Schools
Schools handle sensitive information every day: student personal details, parent contact information, academic records, health data, and financial transactions. A data breach doesn't just affect the school — it affects families. That's why security isn't an afterthought at EdSkool; it's foundational to how we build.
Multi-Tenant Isolation
Every school on EdSkool operates in complete isolation. When your school signs up, you get your own subdomain (e.g., yourschool.edskool.com). Your data is scoped so that no other school — and no other user — can ever access it. This isn't just application-level logic; it's enforced at the database level with foreign key constraints and scoping rules.
Role-Based Access Control
Not everyone in your school needs access to everything. EdSkool enforces strict role-based permissions:
- Admins see and manage everything within the school.
- Teachers can only access scores and data for their assigned subjects.
- Students see only their own results, exams, and timetable.
- Parents see only their children's information.
Data Backup and Recovery
Your data is backed up regularly. In the unlikely event of a system issue, we can restore your school's data quickly. You never have to worry about losing years of academic records.
No Data Selling, Ever
We want to be crystal clear: we will never sell, share, or monetize your school's data. Your data belongs to you, period. We are a school management tool, not an advertising company. Our business model is built on providing value to schools, not extracting value from their data.
Best Practices for Schools
While we handle the technical security, schools should also:
- Use strong passwords and change them regularly.
- Don't share login credentials between staff members.
- Log out when using shared computers.
- Report any suspicious activity to us immediately.
