MyScholarSchoolEnterprise-grade protection for school data
Schools trust MyScholarSchool with some of their most sensitive information — children's records, family contacts and finances. Protecting that data is a first-class part of how the platform is built, not an afterthought.
Encrypted connections
All traffic to and from the platform is encrypted in transit using HTTPS/TLS, so data can't be read as it moves across the network.
Secure password storage
Passwords are never stored in plain text. They're salted and hashed using industry-standard algorithms, so even we can't read them.
Role-based access control
Every account has a role — owner, admin, teacher, finance, parent — and only sees what that role permits. Access follows responsibility.
Multi-tenant isolation
Each school's data is logically isolated and enforced at the database level, so one school can never reach another's records.
Audit logging
Sensitive administrative actions are recorded with who did what and when, giving schools and our team a reliable trail.
Session security
Sessions are protected with secure, HTTP-only cookies and are revalidated on every request to keep accounts safe.
Backup strategy
Losing data is not an option for a school. Our backup approach is designed so that records can always be recovered:
- Automatic daily backups of the platform database, with no action needed from schools.
- Point-in-time recovery capability, so data can be restored to a specific moment rather than only the last snapshot.
- Redundant cloud storage, keeping backup copies across durable infrastructure.
- Backup integrity monitoring, so we know backups are complete and restorable — not just that they ran.
- Disaster recovery procedures that define how we bring the service back after a major failure.
Infrastructure reliability
Cloud-hosted infrastructure
Run on managed, reputable cloud infrastructure built for scale and resilience.
Continuous monitoring
Systems are watched around the clock, with alerting when something needs attention.
Security patching
Dependencies and systems are kept current so known vulnerabilities are closed quickly.
Performance optimization
Caching and query tuning keep the platform responsive as schools grow.
School data isolation
Every school operates in its own secure tenant
This isolation is one of the most important guarantees we make. It's enforced automatically on every request, not left to application code alone.
Incident response
If a security incident occurs, we follow a defined process: contain the issue, investigate its scope using our logs and monitoring, remediate the cause, and communicate with affected schools. Sensitive administrative actions are logged, which helps us reconstruct exactly what happened and confirm the boundaries of any incident.
Where an incident affects a school's data, we will notify that school and provide the information they need to meet their own obligations to families and regulators.
Reliable, backed up, and watched over
Schools shouldn't have to think about infrastructure. Behind the scenes, MyScholarSchool encrypts your data, isolates it from every other school, backs it up daily with tested recovery, and monitors the platform continuously — so you can focus on running your school.
Still need help?
Our team supports schools across every step, from onboarding to end-of-term reporting.