Security & safeguarding at Learning Loft
Procurement-ready by design. UK-hosted, GDPR-compliant and built so schools can adopt without slowing down their data protection officer.
GDPR-compliant by design
Learning Loft is registered with the UK Information Commissioner's Office. We process data lawfully under our role as data processor for schools and joint controller for direct family accounts.
UK & EU data hosting
All pupil data is hosted in UK / EU regions on Tier-IV infrastructure. No pupil data is transferred outside the UK / EU without an appropriate transfer mechanism.
Safeguarding-ready
Aligned with KCSIE guidance. Pupil-pupil messaging is restricted by default. All voice notes and content moderation flow through automated review before reaching adults.
Strong authentication
Generated school IDs, optional SSO for staff, step-up PIN for sensitive areas, and 15-minute lockouts on repeated failures. Passwords are never stored in plain text.
Role-based access (RLS)
Every database query is gated by row-level security. Teachers see only their pupils. Parents see only their children. Admins see only their school. Independently audited.
DPIA & DPA available
We provide a Data Processing Agreement and a DPIA summary on request, ready for school governance and procurement reviews.
Documents for your data protection officer
Available on request. Email info@learningloft.co.uk and we'll send the procurement pack within one working day.
Data Processing Agreement (DPA)
Schedule of processing activities, sub-processors and security measures.
DPIA summary
Pre-completed risk assessment to slot into your governance pack.
Safeguarding statement
Our approach to pupil safety, content moderation and reporting.
Sub-processor list
All third parties processing data on our behalf.
Penetration test summary
Most recent independent security assessment.
Acceptable use policy
Pupil and staff conduct expectations.
Report a safeguarding or security concern
We take every concern seriously. Use the contact below for both safeguarding referrals and security disclosures.
info@learningloft.co.uk- Made by qualified UK teachers
- National Curriculum aligned
- Safeguarding-ready
- GDPR compliant · UK-hosted
- Built with UK schools and educators
- Evidence-informed pedagogy