Legal & Compliance

Data Security at SchoolCentralX

At SchoolCentralX, data security is not an afterthought. It is a core part of how we design, build, and operate our platform.

SchoolCentralX helps schools manage communication and engagement with parents through tools such as notices, messaging, calendar, attendance visibility, homework, gallery, appointments, consent, behaviour updates, and related school operations. Because this may involve student, parent, and staff information, we take a careful and privacy-conscious approach to how data is handled.

Our Security Approach

We design SchoolCentralX with the principle that information should only be accessible to the right person, for the right reason, at the right time.

• Authenticated access to the platform
• Role-based permissions across school admins, teachers, parents, and internal support users
• School-level access separation
• Secure transmission of data
• Controlled access to stored records and files
• Logging and monitoring to help identify misuse or suspicious activity
• Internal processes for secure development, access review, and incident response

Access Control

SchoolCentralX is designed so that access is limited based on user role and school relationship. This means, for example:

• Parents should only see information linked to their own child or children
• Teachers should only access classes, subjects, or records relevant to their role
• School administrators should only manage data for their own school
• Internal SchoolCentralX staff should only access customer data where necessary for support, maintenance, security, or legal obligations

Secure Infrastructure

SchoolCentralX uses modern infrastructure and trusted service providers to support hosting, authentication, storage, notifications, and platform operations. We aim to apply appropriate technical and organisational safeguards to protect data against unauthorised access, loss, misuse, or disclosure.

Monitoring and Response

We work to detect, investigate, and respond to security issues as quickly as possible. Where required by law or contract, SchoolCentralX will support affected customers with appropriate breach-related communication and response steps.

Shared Responsibility

Keeping data secure is a shared responsibility. While SchoolCentralX is responsible for protecting the platform and infrastructure we manage, schools and customers are also responsible for:

• Assigning the right permissions to users
• Keeping login credentials secure
• Maintaining accurate user and student records
• Training staff on good data handling practices
• Ensuring information uploaded to the platform is appropriate and lawful