Your data is yours.
Schools trust us with children's records, so we treat data protection as a feature, not an afterthought. Here is exactly how your data is handled, where it lives, and the control you keep.
How we protect your data
Where your data lives
Your records are stored in the United Kingdom (London), a region with strong data-protection standards. A short list of vetted sub-processors handles hosting, email and payments; each is bound by data-protection terms.
Security by default
Encryption in transit and at rest, passwords hashed with bcrypt, multi-factor authentication on by default, strict per-school data isolation, and least-privilege internal access.
Children's data, protected
We never sell data, never use it for advertising, and never use it to train AI models. Children have no accounts. If your school uses online quizzes, a pupil types answers on a public quiz page with a quiz code and personal PIN, and the answers are stored as your school's data. Report cards go to the guardian email your school provides and, only if your school switches it on, a pupil can look up the report cards their school has generated for them, using their school code, student ID and date of birth.
You stay in control
You are the data controller and we are your processor. Export your data yourself any time, ask us to delete it and we erase it within 7 days (except records the law requires us to keep, such as payment records), and you get a Data Processing Agreement that is part of our terms of service (a signed copy on request) and a ready registration pack for your data-protection authority.
Some of our schools operate where pupils' data must be handled with special care when it leaves the country. We are transparent about the whole flow, and protect it at every step:
- Origin: your school enters the data in the country where you operate.
- Primary storage: it is held in the United Kingdom (London), under strong data-protection standards.
- Limited sub-processing: a few providers in the United States handle files, email, payments and the optional AI assistant.
- Safeguards: contractual data-protection clauses (such as Standard Contractual Clauses or the UK transfer agreement), encryption, and data minimisation so each provider gets only what it needs.
Registering with your data-protection authority?
In Ghana, registration with the Data Protection Commission is active and audited. Your school is the data controller and iEasySR is your cross-border processor. We give you the documents you need, ready to attach to your application.
In francophone West Africa (Senegal, Cote d'Ivoire, Benin, Togo, Burkina Faso), transferring data abroad often needs prior authorisation from your national authority. We give you a pack for that too.