Your school’s data, and who can reach it
A school system holds learner records, guardian contacts and payment history. That is sensitive information about children and about families’ money, and it deserves a straight answer rather than a page of reassuring adjectives.
Each school’s records are kept apart from every other school on the platform rather than sharing one pool with a filter applied. A mistake in a query cannot show one school another school’s learners.
Access is granted by role and can be narrowed to individual screens within a module. Permissions are set per school, so somebody who works across two campuses carries the right access at each.
Staff sign in with a code sent to their phone as well as their password, so a leaked password on its own is not enough. Parents sign in with their phone number rather than a password they will forget or reuse.
Consequential actions are recorded against a person and a time, and that record cannot be rewritten afterwards. This protects your bursar as much as it protects the school.
The ability to open a screen and the authority to approve something are two different things. Someone with wide system access does not automatically gain the power to authorise spending.
Your records are backed up on a schedule, and we test that they restore. A backup nobody has ever restored is not a backup.
Fees go to your accounts, not ours. Enaton records and reconciles them, so a compromise of the website could not redirect a parent’s payment.
If you decide Enaton is not for you, your data is exported and given to you. We do not hold a school’s records hostage to a renewal, and any vendor who does should worry you.
What we do not claim
We hold no security certification today, and we are not going to imply one with a badge on a website. Plenty of vendors do, and a board that checks usually finds the certificate belongs to a hosting provider rather than the software.
What we will do is sit with your board or your IT adviser and walk through exactly how your data is held, who can reach it, how it is backed up and what happens if you leave. If that conversation is a requirement for your school, ask for it and we will book it.
What boards ask us
Who owns our school’s data?
The school does. Your records are yours, we do not sell or share them, and you can export them whenever you ask, including if you decide to leave.
Is our data separated from other schools?
Yes. Each school’s records are kept separately rather than mixed into shared tables with every other school on the platform.
Can we control who sees what?
Yes, down to individual screens. A class teacher does not see the finance module, and a bursar at one campus does not see another campus unless you decide they should.
What happens if a staff member leaves?
Their access is withdrawn immediately, while everything they did stays in the record. Access ends, history does not.
Do you hold our fee money?
No. Fees are paid into the school’s own M-Pesa and bank accounts. Enaton records and reconciles them.
Are you certified to a security standard?
We do not currently claim any certification, and we would rather tell you that plainly than imply one. What we can do is walk your board or IT adviser through exactly how your data is held, separated, backed up and controlled.
Bring your IT adviser to the demo
We would rather answer the hard questions before you buy than after.