Security and student data
If your school is going to record who has an accommodation, you deserve to know exactly how that data is handled. This is what the system does, not what we intend to do.
Per student: name, grade, section, and date of birth if the school enters it. Per guardian: name, relationship and contact details. Per accommodation: the category of support and its reviews. We do not ask for or store national ID numbers, medical diagnoses, photographs or attached documents.
Seeing the student list and seeing who has an accommodation are two different permissions, and the second is not included in the first. An aide may need the class list without that implying access to the file. The school decides, role by role.
Every change to a student record is logged, and so is every time somebody opens one. The log records who and when, never what it said. If we stored the content we would have a second copy of the data we are protecting.
On a dedicated server, encrypted in transit, with no public ports open beyond the site itself. The application process runs under an unprivileged account, not as system administrator. Backups run nightly and are also kept off the server.
The school can permanently erase a student's record, and that erasure is logged too. If the school stops using BeeCare, we hand over your data and delete it on request.
Does your legal team have more specific questions? Write to us and we'll answer in writing. [email protected]
