Annex 2: Security measures

← Back to the Data Processing Agreement

• Encryption of data in transit and at rest.
• Each school's data is kept completely separate from every other school's, enforced by access rules in the database.
• Role-based access: a head of department sees only their own subjects and a class teacher only their own classes.
• Multi-factor authentication for all staff accounts, including teachers.
• EduTrace administrators have no access to student or assessment data through the Service and no "view as the school" facility.
• Students and families see only results the School has chosen to release.
• Production data held on UK servers; no real school data in any test environment.
• A written procedure to detect, contain and report Personal Data Breaches.