Privacy by design

How it works & security

Government-grade accuracy with a privacy-first architecture. Learner data is processed on your network; only anonymised, aggregated information ever reaches the cloud.

The core principle: no learner personal data leaves the college.

Many colleges are rightly cautious about uploading learner-level data to third-party systems — DPIAs, security questionnaires and DPO sign-off all take time. So we designed the platform so you never have to.

The hybrid model

Process locally, share online

A lightweight desktop connector does the sensitive work on your network. The online portal only ever sees anonymised totals.

Connect your MIS

Point the desktop connector at your export from EBS, ProSolution, UNIT-e, PICS, Maytas, Aptem, Bud or OneFile.

Anonymise on your network

Every personal identifier is stripped or hashed locally — replaced with Learner001, Learner002 — before anything is sent.

Share live dashboards

Only anonymised, aggregated data is uploaded. Finance, MIS and SLT see the same live forecasts and risk flags.

On your network

MIS export → anonymise → Learner001, Learner002…

In the cloud

Anonymised totals → forecasts, QAR, funding risk

Removed before upload

Names Addresses Email addresses Telephone numbers ULNs Learner reference numbers Dates of birth Contact details
Security & compliance

Built to satisfy auditors and DPOs

Privacy and compliance are core features, not a checkbox.

Encrypted in transit & at rest

All uploads use TLS; stored data is encrypted. No filename or field carries obvious personal information.

Role-based access

Separate roles for viewing reports and editing rules, so only authorised staff see what they need.

Audit trail

Every rule version and calculation is logged, so figures can be reconciled and assured.

UK data residency

Hosted to UK/EEA data-protection expectations, with GDPR treated as a design requirement, not an afterthought.

Privacy-first funding intelligence

Bring your whole team onto one live forecast — without a DPIA headache or a single learner name in the cloud.