How SENCO View handles your school's data
Where it lives, who can see it, who else touches it, and what we'll show you to prove it. Written for DPOs, IT leads and business managers, in the words you can put in a procurement form.
Where your data lives
SENCO View is hosted in the UK, in the London region. Pupil data is encrypted at rest and in transit. Pupil records don't leave the UK for processing. Transactional emails, such as invitations and notifications, are sent from the EU.
Who sees what
Access follows the role, and the school controls every account.
| Role | What they see |
|---|---|
| SENCO | The caseload. Creates and edits plans, provision and evidence. |
| Senior leaders | Read everything. Edit nothing. |
| Class teachers | A read-only view of their own pupils’ plans and steps. |
| Teaching assistants | The sessions they deliver, to log them. |
| Designated safeguarding lead | Whether a concern exists on a pupil’s record. Nothing else; SENCO View holds no safeguarding notes. |
| Parents and carers | Their own child’s plan, to read, contribute to and acknowledge. |
How the product enforces this, with examples, is on the security page.
Parent access
A parent is invited by the school and sets up their own account, with a passkey or a password. Sessions last 30 days. The school can revoke access instantly. Separated parents each get their own account; nothing is shared between them. A parent sees one child’s plan and nothing else.
Staff access
Staff sign in with the school’s Google Workspace or Microsoft 365 account. There are no separate SENCO View passwords to manage, and leaving the school removes access the moment the school removes the account.
Audit
Every view and every change is logged: who, what, when. The school can export the log at any time. The log is kept for the life of your contract and is included in your export when you leave.
What we don't do with your data
- We don’t hold safeguarding records. A concern shows as a flag, and the detail stays in your safeguarding system.
- We don’t sell data, share it with advertisers or use it for anything other than providing SENCO View to your school.
- We don’t write to your MIS. The connection is read-only.
- We don’t keep data after you leave. On termination the school’s data is exported to the school and deleted on request.
Documents
What you can read now, and what you can ask for.
Our sub-processors, and what each one does, are listed in the data processing agreement. We'll tell you before anyone is added.
- Data processing agreement (Article 28)
- Privacy notice
- Cookie policy
- DPIA support pack, written for the school's own DPIA: available on request.
- Security documentation for procurement: available on request.
To request a document, email hello@myschoolview.co.uk with the school name. We reply within two working days.
Independent review and certification
An independent security review of the parent portal and tenant isolation is scheduled before any school goes live on real data. When it's complete, this line will say so, with the date.
Cyber Essentials is in progress. When the certificate is issued, its number and the IASME verification link will be here, so you can check it rather than take our word for it. We'd encourage you to ask the same of any supplier.
Registration and contact
My School View Ltd is registered with the ICO, registration number ZC110115.
If a personal data breach affects your school's data, we'll notify the school's named contact within 24 hours of becoming aware of it.
DPO and procurement enquiries: hello@myschoolview.co.uk.