A school entrusts learner records to this software. Below is what protects them today. The second half of the page is what this site refuses to claim, and why.
The service runs on machines hosted in France by a French provider. Nothing is served from outside the country.
Some fields carrying personal data are encrypted at the application level, so a copy of the database does not read as plain text. Not every field is: identity fields used to search are not, and the work to close that gap is under way.
The software keeps a register of what it processes, which a school can read and hand to whoever asks for it.
Actions on a record are written to a log as they happen. A school can see who opened or changed what, and when.
How long each kind of record is kept is configured rather than left open, and an engine applies it.
A claim nobody can check is worth less than an admission that can be. These three are missing on purpose.
This site does not describe itself as compliant with the data-protection regulation. Compliance is judged by a school and its supervisory authority, not declared by its supplier.
There is none. Not one certificate, label or approval is held today, and none is displayed.
The software carries an erasure and anonymisation path. It is not advertised here, because it has not been run end to end and proved since it was last repaired. It will be described when it has.