Your students' data: where it lives, how it is handled, and what happens if you leave
Entrusting your school's records, its families and its money to a platform is a serious decision. Here, in black and white, is how Scoliom Scolarité handles your data — and what is written into the contract.
Seven commitments you can check, and that the contract carries
Hosting in the European Union
The platform and its data sit on IONOS infrastructure in the European Union. Every exchange between users (the front office, the leadership team, families) and the platform is encrypted with TLS (https). No data is ever sold on, or put to any use other than running the service.
Nightly backups
The database and the files are backed up automatically every night, with several generations kept. A slip of the hand on a Tuesday? We restore the state of Monday evening.
Backup and restore by the school
The school waits for no one : it starts a backup of its own data from the platform — before a delicate operation, at the end of a term, whenever it sees fit — and can restore from the one it chooses. A school's backup contains only its own data and never touches another school's.
One school, one sealed space
Each school is walled off: its students, its families, its payments and its documents are invisible to every other school. That separation is checked by automated tests replayed each time the platform changes. On the family side, each parent sees only their own children.
An audit trail of what is done
Sensitive actions carried out in the platform are logged: the leadership team can see who did what, and when. Access is individual and granted by role — each person sees only what concerns them.
Reversibility, guaranteed
Your data remains the property of the school and can be exported at any time in reusable formats (students, families, payments, documents). If you leave, you leave with everything — and the data is then deleted from the platform, as the contract sets out.
GDPR and local regulations
The platform is built to the requirements of the GDPR and of the data protection rules that apply where you are: data minimisation, separation between schools, an audit trail, and the rights of individuals. A confidentiality and data-processing undertaking is annexed to every contract — the school remains the data controller, and Scoliom acts as processor.
One point of plain speaking: if an incident affects your data, we tell you without undue delay, with a precise statement of what is involved and of the steps taken — that is written into the contract, not only on this page. And our public demonstrations run on fictional data only: no real student record is ever used as an example.
Your data: the questions every head of school asks
On servers located in the European Union (IONOS infrastructure), with TLS encryption of every exchange between users and the platform. No data is ever sold on, or used for any purpose other than the service provided to the school.
No. Each school is isolated: students, families, payments and documents are walled off school by school, and that separation is checked by a set of automated tests replayed every time the platform changes. On the family side, each parent sees only their own children.
The platform's data and files are backed up automatically every night, with several generations of backups kept. The school can also start a backup itself from the platform and restore from the one it chooses. If an incident affects your data, the school is told without undue delay, with a statement of what is involved and of the steps taken.
Reversibility is guaranteed: your data (students, families, payments, documents) remains the property of the school and can be exported in reusable formats. Once it has been handed back, the data is deleted from the platform in line with the contract.
The platform is built to the requirements of the GDPR and of the personal data protection rules that apply: data minimisation, separation between schools, an audit trail of actions and the rights of individuals. A confidentiality and data-processing undertaking is annexed to every contract; the school remains the data controller and Scoliom acts as processor.
Ask them — including the most technical ones
Your data protection officer, your IT provider, your school's legal adviser: we answer every question about how data is handled in writing, before any commitment is made.
A written reply · No commitment