Data Classification

You can't protect data you haven't mapped. We help you understand what sensitive data your school holds, where it lives, who can access it, and how it moves, across your own systems and the third-party tools your staff use every day.

See all Data Protection features

Mapping Your Data

We run a structured data discovery exercise (interviewing staff, reviewing systems, and analysing data flows) to build a comprehensive map of where personal and sensitive information lives across your school. Most schools are surprised by what we find.

Discovery across school systems, cloud apps, and local storage
Identifies data that's been duplicated, orphaned, or forgotten
Maps data flows between departments and to external parties
Covers student records, staff files, financial data, and health information

Classification Framework

Once we know where your data lives, we apply a classification framework, labelling data by sensitivity level so that everyone in your school knows how to handle it. Clear labels drive consistent behaviour without requiring staff to make judgement calls.

Four-tier classification: Public, Internal, Confidential, Restricted
Applied to both systems (where data is stored) and data types
Integrated into your data handling policies
Staff training on what each classification means day-to-day

Using Classification to Drive Controls

Classification without action is just labelling. We use your data map and classification framework to drive concrete access control, retention, and disposal decisions, ensuring sensitive data is protected at the level it actually warrants.

Access controls aligned to data classification levels
Retention schedules for each data category
Secure disposal procedures for data that's no longer needed
Feeds directly into your DPIA process for new systems

Get Started

Book a free 30-minute business assessment.

We'll review your current cyber and IT setup and show you exactly what your business needs. No hard sell. No commitment. Just a clear picture of where you stand.

We review your current cyber and IT setup

We identify your compliance gaps

We give you a clear recommendation, no obligation

Usually responds within 1 business day

[email protected]