Platform & trust · Security & privacy
Security and privacy, built into every screen.
Strong sign-in, permissions by role and relationship, full audit history, consent and privacy requests—designed for children's data from the start.
- Single sign-on and MFA
- Role-based access
- Audit history
- Privacy requests
Aster Grove School · Example
A role, a school and a clear boundary
A senior title does not automatically open more records.
Who Security & privacy is for
IT and data protection
Access, audit and retention you can evidence.
School leaders
Clear answers for boards, families and inspectors.
Families and students
See what's held and how it's used.
What it fixes
What Security & privacy fixes
Where schools usually struggle, and what changes.
Problem: Shared passwords and super-users
With School Niva: Personal accounts, multi-factor sign-in and narrowly scoped roles.
Problem: No record of who saw what
With School Niva: Every access and change recorded.
Problem: Privacy requests by email
With School Niva: Access, correction and deletion requests tracked to completion.
Safeguards
Safeguards built into Security & privacy
Every record carries a sensitivity level that decides who can open it.
It always
- Classifies data by sensitivity
- Requires a specific role to open the most sensitive records
- Records support access with a reason
It never
- Grants access just because someone is senior
- Lets support staff in without permission and a record
Where AI helps
AI features follow the same permissions and never see more than the person using them.
What's included
Everything in Security & privacy
Use what you need now; switch more on as your school grows.
Sign-in
- Single sign-on
- Passkeys and multi-factor sign-in
- Safe sign-in for young learners
- Account recovery and lockout protection
- Session and device controls
Access
- Roles, relationships and purpose
- Field-level protection
- Separation of duties
- Time-limited support access
- Regular access reviews
Privacy
- Consent management
- Privacy notices
- Access, correction and deletion requests
- Data minimisation
- Children's privacy safeguards
Records
- Full audit history
- Retention schedules
- Legal hold
- Backups and recovery
- Hosting in the region you choose
Want the full picture? Security and privacy in the Trust Centre
How it works
Access that starts and ends with a reason
Every step has an owner. Key decisions stay with people.
Request
Access is requested for a specific role and purpose.
ManagerApprove
The data owner approves the narrowest access that works.
Data ownerApprovalUse
Every view and change is recorded.
Staff memberReview
Access is reviewed on a schedule.
Identity adminApprovalRemove
Access ends when the role ends.
Platform
Connected
How Security & privacy connects
It shares data with the rest of the platform, so nothing is typed twice.
Draws on
- Identity providersSingle sign-on with your existing accounts
Who uses it
Security & privacy, in every workspace.
See it working
Bring your security questions to a demo.
Set up around your school, with your own terminology.