Data Protection & GDPR

Keeping your data safe

We take data very seriously at Arbor & are proud to exceed the industry standard when it comes to protecting your school or MAT

Digital & Physical Security

We’re fully cloud-hosted in Amazon Web Services’ London data centre

We store, process & manage all personal data and backups in the UK

We encrypt your data in Transit and At Rest using bank-grade 256-bit SSL

Our servers are patched continuously to reduce security vulnerabilities

We maintain physical security at every Arbor office using access control, secure keys, CCTV, 24/7 security personnel and secure perimeter doors

Our Certificates

We meet & exceed all criteria set out in the ​DfE’s cloud supplier checklist​, and are on the ​UK Government G-Cloud ​​list of approved cloud suppliers

See our ICO record

Arbor MIS & GDPR

How our MIS helps your school or MAT comply with GDPR

Bespoke, permission-based access

Only view the data that’s relevant to your role with role-based access control (RBAC) planned in collaboration with you when Arbor is implemented

Secure logins for every user

Choose from a range of additional security features, including password rules, enforced regular password changes, and two-factor authentication. Arbor also automatically logs out after a period of inactivity

Easily retrieve data to comply with Subject Access Requests

Download a complete record of all data stored in Arbor about a student or staff member directly from their profile page

Data retention dashboard to help you delete unnecessary data

Arbor will automatically flag records that have passed your data retention period, meaning you can easily find and remove all students (and staff) who left your school more than six years ago

Got a question?

Contact us