Data policy: your school's data

Last updated 5 October 2026

This is a plain-language draft awaiting legal review. It describes how SchoolPilot works today.

Who is responsible

Your school controls its students', parents' and staff's data. SchoolPilot processes it on the school's behalf, to run the services the school uses.

What we hold

Only the fields a school needs to run: records, attendance, results, fees, staff and communication. We don't add personal-data fields without checking they are necessary.

What we never collect

Biometrics of any kind: no fingerprints, no face scans.

How it is protected

• Access by role, with custom roles your school controls.
• Two-factor sign-in for administrators.
• Audit logs and login history.
• Sensitive health records encrypted field by field.

Your school can leave with its data

A school can export all of its data in one click, at any time.