Your school’s data, and who can reach it
A school system holds learner records, guardian contacts and payment history. That deserves a straight answer, not a page of reassuring adjectives.
Eight things we do about it
Each school’s records are kept apart from every other school on the platform rather than sharing one pool with a filter applied. A mistake in a query cannot show one school another school’s learners.
Access is granted by role and can be narrowed to individual screens within a module. Permissions are set per school, so somebody who works across two campuses carries the right access at each.
Staff sign in with a code sent to their phone as well as their password, so a leaked password on its own is not enough. Parents sign in with their phone number rather than a password they will forget or reuse.
Consequential actions are recorded against a person and a time, and that record cannot be rewritten afterwards. This protects your bursar as much as it protects the school.
The ability to open a screen and the authority to approve something are two different things. Someone with wide system access does not automatically gain the power to authorise spending.
Your records are backed up on a schedule, and we test that they restore. A backup nobody has ever restored is not a backup.
Fees go to your accounts, not ours. Enaton records and reconciles them, so a compromise of the website could not redirect a parent’s payment.
If you decide Enaton is not for you, your data is exported and given to you. We do not hold a school’s records hostage to a renewal, and any vendor who does should worry you.
What we do not claim
We hold no security certification today, and we will not imply one with a badge. A board that checks usually finds the certificate belongs to a hosting provider, not the software.
What we will do is sit with your board or IT adviser and walk through how your data is held, who can reach it, how it is backed up and what happens if you leave. Ask for it and we will book it.
Why schools trust Enaton
-
We follow Kenya’s Data Protection Act, 2019
Learner and parent records are handled under the Act, and the policy says how.
Read the privacy policy -
Support every day, 7am to 9pm (EAT)
Reach us by WhatsApp, phone and inside the system, and ask from the screen you are on.
How support works -
Your school’s data is yours
Your school owns its data, and can export it whenever it asks, including if it leaves.
Who owns the data -
Roles, permissions and an audit trail
Each person sees what their role allows, and consequential actions are recorded against a person and a time.
Roles and the audit trail -
Moving from Excel, paper or another system
We guide you through every step and bring your records across with no data loss.
How the move works
What boards ask us
Do you follow Kenya’s Data Protection Act?
Yes. We follow Kenya’s Data Protection Act, 2019. Your school is the data controller and Enaton acts as the data processor on its behalf, and the privacy policy sets out how learner and parent records are handled, kept and exported.
Who owns our school’s data?
The school does. Your records are yours, we do not sell or share them, and you can export them whenever you ask, including if you leave.
Is our data separated from other schools?
Yes. Each school’s records are kept separately rather than mixed into shared tables with every other school on the platform.
Can we control who sees what?
Yes, down to individual screens. A class teacher does not see the finance module, and a bursar at one campus does not see another campus unless you decide they should.
What happens if a staff member leaves?
Their access is withdrawn immediately, while everything they did stays in the record. Access ends, history does not.
Do you hold our fee money?
No. Fees are paid into the school’s own M-Pesa and bank accounts. Enaton records and reconciles them.
Are you certified to a security standard?
We do not currently claim any certification, and we would rather tell you that plainly than imply one. What we can do is walk your board or IT adviser through exactly how your data is held, separated, backed up and controlled.
Bring your IT adviser to the demo
We would rather answer the hard questions before you buy than after.