Want to learn more about Arbor? Join a free webinar Want to learn more? Join a free webinar

Data Protection and GDPR

Keeping your data safe

We take data very seriously at Arbor and are proud to exceed the industry standard when it comes to protecting your school or MAT

Digital and Physical Security

We’re fully cloud-hosted in Amazon Web Services’ London data centre

We store, process and manage all personal data and backups in the UK

We encrypt your data in Transit and At Rest using bank-grade 256-bit SSL

Our servers are patched continuously to reduce security vulnerabilities

We maintain physical security at every Arbor office using access control, secure keys, CCTV, 24/7 security personnel and secure perimeter doors

Our Certificates

We meet and exceed all criteria set out in the ​DfE’s cloud supplier checklist​, and are on the ​UK Government G-Cloud ​​list of approved cloud suppliers

See our ICO record

Arbor MIS and GDPR

How our MIS helps your school or MAT comply with GDPR

Permission-based access

Only view data in line with what's relevant to your role. Role-based access control (RBAC) allows schools to manage each staff member's permissions

Secure logins for every user

Choose from a range of additional security features, including password rules, enforced regular password changes, and two-factor authentication. Arbor also automatically logs out after a period of inactivity

Easily retrieve data to comply with Subject Access Requests

Download a complete record of all data stored in Arbor about a student or staff member directly from their profile page

Data quality dashboard to help keep your system updated

Arbor will automatically flag records that are missing key information and potential duplicates, and the Data Retention page will help you delete unnecessary data

Got a question?

Contact us