Skip to content

Trust

Security

How ParentSignal protects school and family data: encryption, MFA, tenant isolation, audit logging and UK data residency.

Architecture

TLS everywhere, encryption at rest, application-level encryption for consent payloads, parameterised queries, strict upload validation and dependency and container scanning in CI.

Access control

Verified guardian relationships, role-based school memberships, MFA for privileged staff, HttpOnly session cookies with CSRF protection, and automated cross-tenant isolation tests that block release on failure.

Operations

Structured logging with request IDs, immutable audit records for permission changes, encrypted automated backups with tested restores, and documented incident response.

Payments

Parent payments route to school-owned Stripe Connect accounts. We never store card details. Ledgers are append-only and webhook processing is idempotent.

Last reviewed 1 November 2026.

Ready when you are

See ParentSignal with your own school's workflows

A 30-minute walkthrough with our UK schools team using the live product. No slides, no invented statistics.

  • Time-limited trials
  • Monthly or annual billing
  • No parent-facing fees for essential communication