Your data is safe with School Stream

At School Stream, we value the security of your data. We value your trust and safeguard your content with multiple layers of security.

How does School Stream protect my data?

We protect your data in transit and at rest. We do this by storing your data at rest using 256-bit AES encryption on our server and use a secure SSL connection to transmit data between the app and the content server to prevent data theft. Our administration tools also transmit data from your device to the content server using secure SSL.

How does School Stream protect my privacy?

Guarding our users’ privacy is something we take very seriously. We work hard to protect your information from unauthorised access and have designed policies and controls to safeguard the collection, use and disclosure of your information.

What can I do to protect my account?

Use a strong password that you don’t use for any other service. Monitor and control your account by reviewing your account activity and keeping your administrators and users up to date.

By creating a unique password – and guarding it closely – you’ll help keep your School Stream account safe. When creating a password, we have a password strength estimator to help you test your password.

Deletion recovery and version history

By default, School Stream saves a history of changes for CMS content as well as saving items in the trash, and allows you to restore them for up to 30 days.

Third-party software

School Stream allows third party apps to be housed within the app. For security relating to these apps, you will need to refer to each one individually. School Stream is not responsible for the security or privacy of third party software.

Data Backups

School Stream data is backed up on a regular basis in case of catastrophic failure. These backups are encrypted with 256-bit AES encryption on a cloud server. These backups are not intended to be used as recovery for individual school data.

If a school requires their own private backups, they are encourage to use the tools we provide for exporting data. The school will then be responsible for the storage and security of that data.

Data Storage Location

School Stream data is located in a Sydney datacentre as well as Amazon Web Services (AWS). AWS data centres comply with many recognised international and national standards including PCI DSS Level 1, ISO 27001 and ISO 9001. Please visit the AWS compliance page for further information. All School Stream servers are specifically located within Australia in the AWS Asia Pacific (Sydney) Region.

Who can access my data?

Users that your administrators have granted access through the School Stream administration site can access your data.

To provide prompt support, School Stream support team members have access your data. Measures exist to ensure that this access is restricted to essential employees, and to ensure that they only do so at your request.

Access to content that you publish to the app is accessible to people who download the app and access your profile.

What can I do?

It is always best to follow general internet safety precautions.

  • Use a secure password. Use a mix of letters, numbers, and symbols.
  • Don’t share accounts. Create a separate user for each staff member.
  • Don’t upload media (documents, images, etc) that may contain sensitive or personally identifying information.
  • Sign out of your account if other people access your device.
  • Lock your screen or device if you are going to be away from it.

Self Hosted Sites

Schools have the option to host the School Stream server software themselves. In these cases, it is the school’s responsibility to:

  • Manage their own SSL certificates
  • Manage their own data at rest encryption
  • Manage their own data backup procedures