Skip to main content
EnrolFlow

Security and privacy

Built around school responsibilities.

School records include information about children and families. Access, communication and retention decisions need to reflect that responsibility.

School access boundaries

Access is checked against school membership and capabilities. School-owned records use tenant boundaries, and sensitive operations are checked on the server as well as in the interface.

Private family workflows

Staff and family-portal pages are excluded from indexing. Hosted school forms and events are also excluded from search by default. Private newsletter access uses revocable links and reader sessions.

Documents and communications

Uploaded application and form documents use private storage and controlled access. School communication setup includes sender verification, preferences and suppression controls.

Review before activation

Agree the school’s collection notices, safeguarding scenarios, provider arrangements, retention requirements and incident contacts before activation. Service availability and recovery commitments belong in the school’s agreement.

Read our privacy notice for information handling, or contact us to discuss a school security or procurement review.