SECURITY, PRIVACY AND TRUST
Security and privacy designed for schools
Senso helps schools protect sensitive student and operational data through regional Microsoft Azure hosting, encrypted communications, role-based access, controlled support access and documented data-management practices.
Documentation is provided for appropriate customer due diligence and reflects the current service and selected region.
Security and privacy at a glance
Regional cloud hosting
Senso is delivered using Microsoft Azure, with regional service options for Europe, North America and Asia Pacific. The applicable hosting and data-handling arrangements are documented during procurement.
Encryption
Senso uses encrypted communications and Azure-supported encryption for stored service data. Exact protocols and control details can be supplied through the current assurance process.
Role-based access
Administrative access can be restricted according to role and responsibility. Customers can also use supported identity controls and can configure additional console-access restrictions where applicable.
Controlled support access
Support access to a customer environment is authorised, time-limited and limited to the work required. Access is logged and revoked when the authorised task is complete.
Auditable activity
Relevant administrative and service activity is recorded to support investigation, accountability and operational review. Available logs depend on the product, event type and configured retention.
Managed retention and deletion
Senso maintains defined processes for data retention, deletion and anonymisation. Contractual settings and product-specific behaviour are documented with the customer, and deleted data may remain in protected backups until those backups expire.
A clear data journey
Collect only what the enabled capability requires.
Transfer through encrypted connections.
Process and store within the contracted regional service arrangement.
Restrict access by role, purpose and authorised support need.
Retain, delete or anonymise according to documented rules.
Collect only what the enabled capability requires.
Transfer through encrypted connections.
Process and store within the contracted regional service arrangement.
Restrict access by role, purpose and authorised support need.
Retain, delete or anonymise according to documented rules.
The exact data involved depends on the Senso products a customer enables. Senso provides product and contractual documentation so schools can assess those choices before deployment.
Control who can see and do what
- Role-based permissions for administrative users.
- Supported Microsoft and Google sign-in options where applicable.
- The ability to restrict console access by permitted IP address, day or time where supported.
- Least-privilege access for Senso personnel.
- Strong authentication for privileged service administration.
- Customer approval for support access to a customer environment.
- Audit trails for relevant access and administrative activity.
How school data flows through Senso
A controlled, layered access model. School data is captured and stored within Senso's regional Azure environment. Access at every layer requires explicit authorisation.
Support without unrestricted access
When investigation requires access to a customer's Senso environment, the customer authorises that access. It is limited in time and scope, uses the least privilege appropriate to the task, and is logged for review. Read-only access is used where it can satisfy the support need.
Customer authorises.
Senso investigates with limited access.
Access is revoked and the activity remains auditable.
Regional privacy information
UK and European customers can use Senso's European service region. Data-processing terms, subprocessor information, retention arrangements and international-access safeguards are available for due diligence.
Prepared to protect and recover the service
- Cloud platform monitoring and security alerting.
- Vulnerability and security maintenance processes.
- Protected backups and restoration procedures.
- Business continuity and disaster-recovery planning.
- Testing and review of recovery arrangements.
- A documented security-incident process covering identification, containment, recovery, investigation, communication and review.
- Customer notification without undue delay when a personal-data breach affecting Customer Data requires notification under the applicable agreement or law.
Detailed recovery metrics, infrastructure names and operational procedures are not published on this page.
Technology supports safeguarding decisions; people remain accountable
Senso can help authorised school teams identify and investigate activity relevant to safeguarding, classroom management and IT operations. The school decides which capabilities to deploy, who may use them, how users are informed, and how alerts or evidence are reviewed and acted upon.
Senso responsibilities
- Operate and protect the contracted cloud service.
- Provide access controls and documented product behaviour.
- Maintain support, incident and data-management processes.
- Provide appropriate assurance information.
Customer responsibilities
- Select lawful and proportionate monitoring settings.
- Configure roles, permissions, policies and retention appropriately.
- Inform users and obtain any required acknowledgement or consent.
- Review alerts and make safeguarding or disciplinary decisions.
- Secure customer identities, endpoints and local administration.
Monitoring depends on the Senso capabilities deployed, the enrolled device or account, and the customer's configuration and policy.
A transparent service ecosystem
Senso uses selected infrastructure and service providers to deliver and support the platform, and offers customer-authorised integrations with education and safeguarding systems. Current subprocessor and integration information is available during due diligence and should be reviewed for the customer's selected products and region.
The evidence your review team needs
- Data-processing and privacy information.
- Technical and organisational control summary.
- Hosting and regional data-residency overview.
- Subprocessor and authorised-access information.
- Data retention, deletion and backup summary.
- Security incident-response overview.
- Business continuity and disaster-recovery overview.
- Shared-responsibility guidance.
- Deployment and onboarding information.
- Support and service-level information.
Tell us your organisation, region and the documents your review requires. Sensitive material may be shared through an appropriate controlled process.
Common questions
Request the Senso assurance pack
Tell us your organisation, region and the documents your review requires.