Security · & compliance

Compliant by design,
sovereign by default.

Schools trust samipe with their staff, students and timetables — so we treat that data as theirs, not ours. GDPR, PDPA and HIPAA compliant, hosted in the region you choose, and yours to export or delete at any time.

GDPR · PDPA · HIPAA · Data residency options · DPA available

EU US APAC YOUR REGION · EU SCHOOL DATA Export Delete Access
Regulations, covered

Built to the standards your school answers to

samipe is compliant across the frameworks that matter to schools in every market we serve — with the paperwork to back it up.

EU · UK

GDPR

Lawful basis, data-subject rights, and a Data Processing Agreement on request.

Singapore · APAC

PDPA

Consent, purpose limitation and breach-notification obligations built in.

United States

HIPAA

Safeguards for any protected health information a school holds on students or staff.

Your data stays yours

You're the data controller; samipe is the processor. That isn't just a legal line — it's how the product is built. We never sell your data or use it to train models.

You own it

Your records are yours. We hold them to run the service, nothing more.

You place it

Choose the region your data lives in — EU, US or APAC — and it stays there.

You export it

A full export in standard formats, any time — no lock-in, no ransom.

You remove it

Delete on request; we honour agreed retention and confirm when it's done.

How we protect it

Encrypted throughout

TLS in transit and strong encryption at rest — data is never stored in the clear.

Role-based access

Roles for the whole school or a single department, delegated access with end dates, and least-privilege by default.

Audit trail

Every approval, edit and export is logged — who did what, and when.

Backups & recovery

Automated, encrypted backups, kept for 30 days by default (or a period you agree with us), so a bad day never becomes a lost term.

Isolated per school

Each school's data is separated — one school can never see another's.

Monitored 24/7

Continuous monitoring, with planned maintenance scheduled outside school hours in your region and notified in advance.

Health privacy controls

Full health records are visible only to health staff; the AI helper is off for health data by default.

AI helper safeguards

The helper works within each teacher's permissions, asks before acting, and logs every action — and school data is never used to train models.

Working through procurement? Ask for our security overview and DPA — we'll complete your vendor and data-protection assessments.

Send us your security questionnaire

We'll walk your IT and data-protection team through hosting, controls and compliance — and hand over the paperwork.