Private by design
Every school's records are kept separate at the database level, not by a setting that could be switched off. Here is exactly what that means, with nothing claimed that cannot be checked.
Every school, fully isolated
Sfolio hosts many schools on one platform, but no query anywhere can return another school's data. That separation is enforced in the application's own data layer, applied automatically to every tenant scoped record, and covered by automated tests that seed a second school and assert zero leakage before any change can ship.
Role based access
What a staff account can see and do depends on the role your school's own director or head teacher assigns them, director, teacher, bursar and other roles each see only what their role needs. Sfolio's own platform team does not have standing access to a school's operational data as part of normal use.
Pupil photos, kept private
Student photos are stored in a private cloud storage bucket, served only through signed, time limited links, not a public folder. They are never stored as a plain public file alongside the rest of the site's assets.
Backups
Database backups are handled by Sfolio's hosting provider as part of its managed hosting service. We do not publish a specific backup schedule on this page; ask us directly if your school needs that detail for its own records.
Your account, your access
Every person who uses Sfolio at your school has their own login. There is no shared password, and an account can be disabled the moment someone leaves your school's staff.
Ask us anything about how your school's data is handled
If a question about security or privacy isn't answered here, ask us directly rather than guessing.