SECURITY AND Data PRIVACY 

 

Clever Education Solutions is committed to protecting the confidentiality, integrity, and availability of the information entrusted to the Cordelia platform.

Cordelia was designed to support the administrative operations of schools while ensuring that school data is handled responsibly and securely. We implement technical and organizational safeguards to protect the information stored within the system and to ensure that it is used only for the purposes defined by our client schools.

The following overview describes our approach to data protection and security.

Data Ownership and Processing 

Schools retain full ownership and control of the information stored in the Cordelia platform.

Clever Education Solutions processes personal information solely on behalf of the school and only for the purpose of providing the Cordelia platform and related services.

Schools determine what data is entered into the system and which members of their staff are authorized to access it.

Secure Infrastructure

Cordelia is hosted on secure cloud infrastructure using Heroku, a managed platform built on Amazon Web Services (AWS).

These platforms provide enterprise-grade infrastructure, including:

  • secure data centers with controlled physical access
  • system monitoring and threat detection
  • redundancy and high availability
  • infrastructure maintenance and security updates

All data transmitted between users and the platform is encrypted using modern security protocols.

Data Protection and Access Controls

Cordelia uses role-based access controls that allow schools to determine which staff members may access different categories of information.

Security safeguards include:

  • role-based user permissions
  • secure authentication requirements
  • restricted administrative access
  • monitoring and logging of system activity

These measures help ensure that only authorized users can access school data.

Data Retention and Deletion

Schools maintain control over their data throughout their use of the Cordelia platform.

If a school ends its use of Cordelia, the school may export its data and request deletion. Unless otherwise required by law, school data is securely deleted within ninety (90) days following termination of the service.

Subprocessors

Cordelia uses a limited number of trusted service providers to support the operation of the platform.

These include secure cloud infrastructure providers and transactional email services necessary for platform operations.

Each provider is required to maintain appropriate security and data protection safeguards.

Security Documentation

Additional information about Cordelia’s data protection practices is available in the following documents:

  • Cordelia Security Overview
     • Data Retention & Deletion Policy
     • Subprocessor List

Contact

Questions regarding security or data protection practices may be directed to:

Clever Education Solutions
[email protected]