Data Security at SchoolCentralX
Last updated: 16 April 2026
At SchoolCentralX, data security is a core part of how we design, build, and operate our platform.
SchoolCentralX is a product of Volume Media Limited and is designed to help schools manage communication and engagement with parents and guardians through tools such as notices, messaging, calendar, attendance visibility, homework, gallery, appointments, consent, behaviour updates, and related school operations.
Because SchoolCentralX may involve student, parent, guardian, teacher, and staff information, we take a careful and privacy-conscious approach to protecting data and limiting access appropriately.
This page provides a high-level overview of how we approach security across the SchoolCentralX platform.
Our Security Approach
We design SchoolCentralX with the principle that information should only be accessible to the right person, for the right reason, at the right time.
Our approach combines technical safeguards, operational controls, and internal processes designed to help protect data against unauthorised access, misuse, loss, alteration, or disclosure.
Security considerations are built into:
- platform access and authentication;
- role-based permissions;
- school-level access separation;
- storage and transmission of data;
- monitoring and auditability;
- internal access controls;
- secure development and operational processes;
- incident detection and response.
Access Control and Permissions
SchoolCentralX is designed so that access is limited based on user role, school relationship, and relevant permissions.
This means, for example:
- parents and guardians should only see information linked to their own child or children;
- teachers should only access classes, subjects, records, or communications relevant to their role;
- school administrators should only manage data for their own school or organisation;
- internal SchoolCentralX personnel should access customer data only where necessary for support, maintenance, security, legal compliance, or service operations.
We aim to apply the principle of least privilege wherever reasonably possible, so access is limited to what is necessary for a user's role.
Authentication and Account Protection
SchoolCentralX uses authenticated access controls to help ensure that only authorised users can access the platform.
Depending on the context and product flow, this may include measures such as:
- secure login processes;
- password-based authentication;
- account invitation and activation controls;
- session management;
- account recovery processes;
- additional verification or access checks where appropriate.
Where available and appropriate, we may introduce further account-protection measures over time to strengthen security and reduce the risk of unauthorised access.
Users are responsible for keeping their login credentials secure and for notifying their school or SchoolCentralX if they suspect unauthorised access to their account.
Secure Infrastructure
SchoolCentralX uses modern infrastructure and selected service providers to support areas such as hosting, authentication, storage, notifications, and core platform operations.
We aim to apply appropriate safeguards to protect data during transmission, storage, and authorised access, including measures relating to:
- authenticated platform access;
- controlled storage access;
- secure transmission of data;
- environment separation where appropriate;
- backup and recovery processes;
- operational resilience and maintenance.
Our infrastructure and provider choices are intended to support confidentiality, integrity, and availability across the service.
Children's and Student Data
SchoolCentralX is built for use by schools, parents, guardians, and authorised staff. It is not designed for independent consumer use by children.
Because the platform may process student information, including information relating to children, we recognise that this data requires a higher level of care. Our platform design, access model, and operational controls are intended to help protect student data from unauthorised access, misuse, or unnecessary exposure.
We do not use children's personal data for advertising, targeted advertising, or unrelated commercial profiling.
Monitoring, Logging, and Review
We use logging, monitoring, and review processes to help detect unusual behaviour, investigate issues, and support security oversight.
These processes may assist us in:
- identifying suspicious activity;
- investigating misuse or attempted misuse;
- supporting incident response;
- reviewing access and operational events;
- improving service reliability and protection over time.
Access to logs and internal operational data is limited to authorised personnel with a legitimate need to use that information.
Secure Development and Internal Controls
Security is not only about infrastructure. It is also about how the platform is built, maintained, and supported.
SchoolCentralX uses internal processes intended to support secure development and controlled operations, including areas such as:
- access review;
- change management;
- environment management;
- issue investigation;
- incident handling;
- internal confidentiality and access expectations.
We work to ensure that authorised personnel handling customer-related information are subject to appropriate confidentiality obligations and reasonable access restrictions.
We may also carry out internal reviews, security checks, or service assessments from time to time as part of maintaining and improving the platform.
Incident Detection and Response
We work to detect, investigate, contain, and respond to security incidents as quickly and responsibly as possible.
Where appropriate and required by law or contract, SchoolCentralX will support affected customers with breach-related communication and response steps, including sharing information reasonably necessary to help them assess the issue and meet their own obligations.
Where SchoolCentralX is required to notify a customer or support a customer response, we aim to do so without undue delay and in line with applicable legal and contractual requirements.
Shared Responsibility
Keeping data secure is a shared responsibility.
While SchoolCentralX is responsible for protecting the platform and the infrastructure we manage, schools and other customers also play an important role in protecting data.
Customers are responsible for, among other things:
- assigning appropriate roles and permissions to users;
- keeping user, staff, parent, and student records accurate and up to date;
- ensuring login details and devices are managed securely;
- training staff on responsible data handling and platform use;
- reviewing access regularly;
- ensuring information uploaded to the platform is appropriate, lawful, and aligned with their policies and obligations.
Strong security depends not only on platform controls, but also on good operational practice by each school or organisation using the service.
Security and Privacy Work Together
Security and privacy are closely linked, but they are not the same thing.
This page explains our general security approach. For more detail on how SchoolCentralX handles personal data, please also review our:
Schools or organisations that require further security or procurement information may contact us to request additional documentation where appropriate.
Contact
If you have questions about security at SchoolCentralX, please contact:
Address: 20–22 Wenlock Road, London, N1 7GU, England, United Kingdom