Your security & privacy is our priority
At Education Perfect, we prioritise the security and privacy of your data. Whether you are using our website or our product, our comprehensive approach ensures that your school and students are protected at every level.
ISO 27001 Certification
Leading International standard for information security
Safer Technology for Schools (ST4S) Badge (2022.1)
Adherence to the latest standards in providing a safer technological environment for schools
GDPR Compliance
Protecting the privacy rights of individuals under the General Data Protection Regulation
Student Privacy Pledge
A commitment to safeguarding student privacy and ensuring ethical data practices
Our goal is to provide a learning environment that is every bit as safe and secure as being at school
EP’s comprehensive approach
Data encryption measures
Our high standard data encryption and security measures ensure comprehensive data protection both in transit and at rest.
Systematic audits
Regular and systematic reviews of our system are conducted. This Includes checks by accredited auditors and internal reviews ensuring best practice guidelines put in place by government bodies, school groups, and AWS are followed.
Secure development standards
We test our code and infrastructure with automated quality and security scanning.
Hosted on AWS Cloud Sydney
We adhere to AWS guidelines and frameworks for stringent security standards. EP has implemented a diverse array of security, monitoring, and alerting services provided by AWS, with high impact redundancy measures in place.
High performance and reliability
EP supports up to 800,000+ unique visitors monthly with an average uptime of 99.98%.
Resilience during peak demand
Our robust infrastructure is proven to seamlessly handle peak demand (such as a 700% increase in usage during Covid), without compromising performance.
Data encryption measures
Our high standard data encryption and security measures ensure comprehensive data protection both in transit and at rest.
Systematic audits
Regular and systematic reviews of our system are conducted. This Includes checks by accredited auditors and internal reviews ensuring best practice guidelines put in place by government bodies, school groups, and AWS are followed.
Secure development standards
We test our code and infrastructure with automated quality and security scanning.
Hosted on AWS Canada
We adhere to AWS guidelines and frameworks for stringent security standards. EP has implemented a diverse array of security, monitoring, and alerting services provided by AWS, with high impact redundancy measures in place.
High performance and reliability
EP supports up to 800,000+ unique visitors monthly with an average uptime of 99.98%.
Resilience during peak demand
Our robust infrastructure is proven to seamlessly handle peak demand (such as a 700% increase in usage during Covid), without compromising performance.
Security and Risk Assessment Information for Schools
What data is collected?
In order to enrol a student on the platform, the school provides the necessary information for a student to be linked with the correct teacher and course curriculum. This includes the student’s name, school, class, teacher information and username, which is typically a school email address. In some cases, this may also include a Student ID number.
Teachers can assign tasks and activities within the platform, and students will enter their responses directly to the portal. Information collected through this process includes the students’ answers and results, time spent completing tasks, details about the device used (for example your internet or IP address, and browser type used) and the number of logins.
How is the data used?
All data collected is used solely for educational purposes.
A student’s personal information is provided for log-in access and to ensure the correct assignments and tasks are loaded into the student profile. Classroom teachers and other authorities within the school will be able to view a student’s work and adjust their learning material according to the student’s needs.
Some employees of EP will have access to the identifiable information housed within our system to support the day-to-day operations of the business. This includes those teams responsible for creating teacher and student accounts and/or responding to inquiries regarding an account. This may also include individuals responsible for understanding engagement across the platform allowing us to make informed decisions regarding future enhancements to the platform’s functionality for the ongoing benefit of teachers and students.
Is the data secure?
Education Perfect takes the privacy and security of all data very seriously and has put in place measures to protect the information of all users of our platform. Our policies have been developed to adhere to the local privacy laws including the Australian Privacy Act, the New Zealand Privacy Act 2020, General Data Protection Regulations (GDPR), and US data protection laws.
In addition to secure cloud management systems, EP uses role-based access controls to ensure that only teachers in a school can access data in their school.
All employees of EP undergo annual privacy and security training with additional detailed guidance available in our internal privacy compliance manual.
When is data deleted?
Your school retains control over the user data and can request its removal from our system at any time.
If an explicit request to remove information is not provided, user data is automatically anonymised once the account is no longer in an active class and has been unused for 3 years. We allow for this 3 year time period as this provides teachers with an opportunity to compare results for cohorts of learners over time. It also means that if a student stops using EP for a year but then comes back, they can pick up where they left off on their learning journey.
Where is student data stored?
All student data except that of Canada based customers is stored in Amazon Web Services’ Sydney data centres. Student data collected for customers based in Canada is hosted in AWS Canada centres. Student data is not transferred to any third party systems.
Where is teacher and school data stored?
Teacher and school staff data is stored in AWS, Sydney. It is also stored or processed in different geographic locations when this is required for operational purposes and to deliver the required service and experience to our customers. Details of sub-processors, use of data and locations can be found here.
