Security Overview

Everything sent between a school's devices and SchoolBudi travels over an encrypted connection (HTTPS/TLS), so it cannot be read in transit.

Information stored in our database is encrypted at rest by our hosting provider, including the copies held in backups.

Staff sign in with their own email address and password. Passwords are never stored in a readable form — only a one-way scrambled version is kept, so nobody at SchoolBudi can see them.

Pupil PINs are stored the same way. A teacher can reset a pupil's PIN but can never look it up.

Repeated wrong PINs or class codes are blocked automatically after a number of failed attempts, to stop guessing.

Our hosting provider takes regular automatic backups of the database, protected with the same encryption as the live system.

Backups let us restore the service quickly if something goes wrong, and they are kept only as long as needed.

Everyone sees only what their role allows. Children see their own check-in for that day. Teachers see the classes they own. School administrators see their own school. Nobody can see another school's data.

These rules are enforced by the database itself, not just by the screens, so they cannot be bypassed.

Administrative actions such as exports, deletions and retention changes are recorded in an audit log.

SchoolBudi runs on managed cloud infrastructure with data held in the United Kingdom.

Our providers maintain physical and network security for the data centres, keep systems patched, and hold recognised security certifications.

We monitor the service for errors, unusual activity and failed sign-in attempts, and review security alerts from our providers.

Software components are kept up to date and scanned for known vulnerabilities, with issues tracked until they are resolved.

Any suspected security incident is handled under our Data Breach Response Plan.

If you believe you have found a security issue, please email hello@schoolbudi.co.uk with the details.

We take every report seriously, acknowledge it quickly, and will keep you updated while we investigate.