Security

Student records, kept the way a school would want.

A school holds some of the most private information there is — children's names, their parents' numbers, their marks, their documents. This page says how Synthixx Campus protects it, in terms a principal can check, and says where we stop.

In short

Synthixx Campus keeps each school’s data apart at the database level, stores it in Sydney, Australia, encrypts every connection, backs every school up each night for thirty days, and shows each person only what their role needs. It is not independently certified, and this page does not claim it is.

How a school's data is protected

  • Schools are separated by the database, not by the code

    The tables that hold a school's records carry a rule that limits a request to the school the person is signed in to. A mistake in a page cannot show one school another's students, because the database refuses to return them.

  • Roles decide what each person sees

    Administrators, teachers, accountants, parents and students each reach only the parts of the product their role is given. A parent sees only their own child, and a person restricted to one campus sees only that campus.

  • Every connection is encrypted

    The site is served over HTTPS only, with the browser told to insist on it, and its pages refuse to be shown inside another site's frame.

  • Identity documents are masked

    National ID, passport and similar numbers are shown in full only to those who need them, and masked to everybody else. Documents sit in a private vault, not behind a public link.

  • Changes are recorded

    Who recorded a payment, who changed a record and when are kept, so a question in March has an answer.

  • Passwords are never stored readably

    Sign-in is handled by an authentication service that stores a one-way hash of each password.

Backups and recovery

  • A full copy of every school, every night

    Each school is backed up nightly into a private store and the last thirty days are kept.

  • A recycle bin for the wrong click

    A deleted record is moved to a bin rather than removed, and can be restored.

  • Your data leaves when you do

    Students, fees and payments export to CSV from inside the app, whenever you want them, at no charge.

Where the data lives

A school’s records are stored in Sydney, Australia. We say so because a school owner should be told where their students’ data is, not left to assume. We do not claim a data centre in your country, and we would not want a school to choose us on a claim like that. If your school is required to keep student data inside its own country, ask us before you register.

Payments

Synthixx Campus does not collect card numbers and does not sit between a school and its parents’ fees. A school pays for a plan by transfer, and a person confirms each payment before the plan is switched on. Fees that parents pay the school are recorded by the school’s office; the money goes into the school’s own account.

What we do not claim

We have not been independently audited or certified, for example to ISO 27001 or SOC 2, and this page describes how the product is built rather than an audit result. The privacy policy says who personal information is shared with and what your choices are, and the about page says who is accountable for it.

Questions about security

Where is our school's data stored?

In Sydney, Australia, in a managed database. It is not kept on the office computer or on parents' phones.

Can another school see our students?

No. Separation between schools is enforced by the database itself, with a rule on the tables that hold school data limiting each request to the school the person signed in to. It does not depend on a filter in the application code that somebody could forget to write.

What happens if somebody deletes a record by mistake?

Deleted records go to a recycle bin and can be restored. Separately, a full copy of each school is taken every night and the last thirty are kept.

Can we take our data with us?

Yes. Students, fees and payments export to CSV from inside the app, at any time, at no charge.

Are you certified?

No. We have not been independently certified — for example to ISO 27001 or SOC 2 — and we do not imply that we have. What this page describes is how the product is built, not an audit report.

Who do we tell about a security problem?

Write to info@synthixx.com with the subject "Security". A person reads it.

Read next

Try it with your own school

Register your school, add one class, and see it working before lunch. No card, and your data stays yours.