How KlickitSMS looks after school data

Isolation

Every school on the KlickitSMS platform runs on its own database. One school’s records are never stored alongside another’s.

Access control

• Nine role-based portals — administrator, director, accounts, HR, stores, head of department, teacher, student and parent — each limited to what that role needs.
• Guardians can only ever see the children linked to their own account.
• Roles are assigned and changed by the school’s administrators.

Sign-in protection

• Passwords are stored as secure hashes, never in plain text.
• Repeated failed sign-in attempts are rate-limited.
• Sessions time out automatically after inactivity.

Accountability

• Key actions are recorded in action logs that administrators can review.
• Revenue and expenditure entries have their own audit logs.
• CBT sessions record security events such as tab switching.

Questions

If you have questions about security or data protection for your school, contact our team.