Encryption at rest and in transit
All student data is encrypted using AES-256 at rest. Every connection to Edunostics is secured via TLS 1.3, preventing interception at any point.
How Edunostics protects student and school records.
Encryption, role-based access, and audit logs protect assessment data and parent communications. Schools keep ownership of their records.
Role-based access control
Each user role has precisely scoped data access. Teachers only see the classes and subjects they are assigned to. Parents only see their own children.
Audit logs
Every data change including score edits, report approvals, and account modifications is logged with a timestamp and user identity for full accountability.
Automated backups
Data is backed up automatically every 24 hours across geographically redundant storage. Recovery point objectives are measured in hours, not days.
Data retention controls
Schools control how long student data is retained. Records can be exported in full at any time before deletion, ensuring no data is ever held hostage.
Penetration testing
Edunostics undergoes regular third-party security assessments. Identified vulnerabilities are remediated on a strict timeline before any deployment.
What we promise every school
Clear commitments on data ownership, incident response, and access control.
No data salesWe will never sell your school data to any third party.
Incident noticeWe will notify you within 72 hours of any confirmed data incident.
Full exportYou can export all your data at any time, in full, at no charge.
Physical controlsStudent records are stored on servers with physical access controls.
Authorised accessStaff and vendor access to production data requires written authorisation.
Critical patchesSecurity patches are applied within 48 hours of critical vulnerability disclosure.
Have a security question?
Contact our security team directly for compliance documentation, penetration test reports, or data processing agreements.