Security and trust
How we protect a school’s records
A school trusts us with pupil records, results and fee information. This page describes the controls that exist in Natial Schools today, in plain terms. It is not a guarantee, and it is not a certification. Natial Schools is in pilot, and we would rather tell you what is in place than promise more.
Each school’s data is kept separate
Every school is its own space. On each request, Natial checks that the person signed in belongs to that school before anything is read or changed. The database applies a second layer of separation on top of that, so school data is kept apart in more than one place. Being signed in to one school does not open another school’s records.
Access depends on role
Each person has a role in their school: for example administrator, principal, vice-principal, teacher, accountant, bursar, secretary, parent or pupil. What they can see and do follows from that role. For example, only school leadership can approve results, and only the principal or an administrator can publish them. Parents and pupils see only their own published records.
An audit trail of important changes
Changes to results, fees and pupil records are recorded with who made them and when. That includes score submissions, approvals, publishing, payment confirmation and reversal, and edits to a pupil’s record. School administrators and principals can review the trail.
Sign-in protection
Passwords are stored as salted hashes, never as plain text. Repeated sign-in attempts are rate-limited. Pupils and parents receive accounts from their school, and a school administrator can remove a member’s access.
Data in transit
Traffic between your browser and Natial is encrypted with HTTPS.
Who owns the data
Each school owns and controls the records it enters. Natial stores and processes them on the school’s behalf. We do not sell personal data, and this site does not run advertising trackers. Read the Privacy Policy for detail.
Limits
What we do not claim yet
Natial Schools is in pilot with one school. We do not hold a security certification. We do not publish an independent security assessment. We do not offer an uptime guarantee during the pilot. We do not make a promise about where data is stored. Online fee payment is being piloted in Paystack test mode at one school and is not a general live-payment feature. If a control matters to your school’s decision, ask us and we will answer plainly.
Contact
Talk to us
Questions about security or privacy can reach us through the contact form.