Security guide

Data Processing

How sensitive data is processed

Before you begin

Review the configuration and terms for the services your school actually uses.

Operator responsibilities#

For a school-managed deployment, the operator chooses infrastructure, providers, source connections, and retention settings. Document those choices before processing school information.

Model and connector requests#

Model providers receive the context needed for a request. Connectors read their configured sources. Review the permissions and provider terms for the services actually enabled.

Prepare a rollout#

Check role boundaries, class access, backups, deletion behavior, and the support process. Keep the approved configuration with the school's deployment records.