Security and privacy at Ilmoria
Schools and companies trust us with records about children, students and employees. This page explains how we protect them, in plain language.
Data separation
- Every school or organization’s data is kept apart at database level with row-level security
- Users only ever see the schools and records their role allows
- Group leaders see across schools only when you grant it
Encryption and hosting
- Encryption in transit (TLS) and at rest
- Enterprise-grade cloud infrastructure
- Daily backups with point-in-time recovery
- Hosting-region options to discuss for your country
Access control
- Role-based permissions for administrators, teachers, students, parents and office staff
- Sign-in with Google or Microsoft, and SAML single sign-on on Enterprise plans
- Account lockout after repeated failed sign-ins
- Admin “log in as” sessions that are recorded and expire after two hours
Records and audit
- Final grades lock once confirmed
- Transcripts and certificates carry serial numbers and public verification pages
- Important actions are kept in an audit trail
- Exports of users, grades and records on request
Privacy tools
- Consent records for enrolment documents and policies
- Data export and deletion on request
- Clear retention rules agreed in your contract
- A data processing agreement for Enterprise customers
What we do not claim
We do not claim certifications we have not earned. If your procurement process needs a security questionnaire, a data processing agreement or a hosting-region discussion, we will work through it with you.
Security questions or a vulnerability to report? Email security@lovely-meringue-90ef4b.netlify.app
Questions buyers ask
Where is our data hosted?
Ilmoria runs on enterprise-grade cloud infrastructure. Hosting-region requirements differ by country and sector, so we discuss them during procurement and agree the region in your contract where options exist.
Can other schools on Ilmoria see our data?
No. Each organization’s data is separated at database level with row-level security, and every request is checked against the signed-in user’s organization and role.
Do you sell or share student data?
No. Student and staff data is used only to provide the service to your institution. We never sell it or use it for advertising.
Can we get our data out if we leave?
Yes. You can export users, enrolments, grades and records, and on request we delete your data after the agreed retention period.
See Ilmoria with your own school in mind
A 30-minute call with a product specialist. Bring your timetable, your grading rules and your toughest question. We will show you how it works for you, in English or Arabic.