Privacy & Security

Steplab stores and manages data for 1000s of trusts and schools globally. Read on to learn how your data is kept safe and secure on our platform.

Overview

Standards

  • Cyber Essentials logo
    Cyber Essentials
  • ST4S logo
    ST4S
  • GDPR logo
    GDPR

Controls

Infrastructure security

  • Production data backups conducted
  • Logs managed centrally
  • Infrastructure audit trail established

Organisational controls

  • Staff background checks performed
  • Human factor simulations performed
  • Disaster recovery plan established

Product security

  • Penetration testing performed
  • MFA (Multi-factor authentication) supported
  • Data encrypted at rest

Data and privacy

  • Privacy policy established
  • Data residency in UK and Australia
  • No special categories of personal data collected

Subprocessors

  • Amazon Web Services (AWS)

    Cloud data storage and compute • UK / Australia

  • Google Cloud Platform

    Cloud data storage and compute • UK / Australia

  • Zoho Corporation B.V.

    Customer relationship management • EU

  • Crisp IM SAS

    Live chat functionality • EU

FAQs

Get in touch

If you have any additional questions about data privacy or security at Steplab, please feel free to get in touch.

Keeping data secure for our education partners globally