What infrastructure does SELMA use for hosting?

SELMA operates on Amazon Web Services infrastructure within Australian data centres, providing geographic data sovereignty, professional infrastructure management, high availability architecture, automated backups, disaster recovery, and scalable performance.

What is SELMA's architecture approach?

SELMA deploys in a single-tenant architecture with dedicated database instances, no cross-customer access, custom security policies, independent backup and recovery, and compliance flexibility.

What authentication methods does SELMA support?

SELMA supports mandatory multi-factor authentication (MFA), enterprise SSO integration with institutional password policies, conditional access rules, centralised user provisioning and de-provisioning, and authentication audit trails.

What compliance standards does SELMA meet?

SELMA is GDPR compliant with data subject rights support, operates on ISO 27001 certified infrastructure, is pursuing ISO 27001 certification, adheres to Australian Privacy Principles, and meets education sector standards.

How does SELMA approach AI integration?

SELMA takes a safety-first approach with enclosed AI environments, data stewardship principles, opt-in AI features, transparency and auditability, human oversight, and bias monitoring to ensure AI benefits never come at the cost of student privacy or data security.

Home Data Protection

Data Privacy and Security for Schools and Education Providers

Your Trust Is Our Foundation

Educational institutions handle some of the most sensitive information: student records, academic histories, financial data, and personal details. At SELMA SIS, we recognise this responsibility and have built our platform with security and privacy as non-negotiable priorities, not afterthoughts.

We view ourselves as stewards of student information, not merely processors of data. This philosophy guides every decision we make, from architectural choices to feature development to vendor selection.

SELMA SIS login screen with multi-factor authentication

How SELMA Protects Your Data

Security isn't added to SELMA after development; it's embedded in our architectural decisions and development practices from the outset.

Enterprise-grade infrastructure

Hosted on AWS in Australian data centres, with load balancing across availability zones, daily encrypted backups and tested disaster recovery.

Secure by design

Built to OWASP guidelines, with TLS 1.3 in transit, AES-256 at rest, peer-reviewed code and automated security scanning.

Single-tenant architecture

Every institution gets its own database instance, so one customer's data can never reach another's.

Vetted people, managed devices

Staff are background-checked and work only on encrypted, company-managed devices, with the least access their role needs.

MFA and single sign-on

Multi-factor authentication is mandatory on every account, and staff can sign in with Google Workspace or Microsoft 365.

Role-based access control

Hundreds of permissions set what each role can see and do, and a privacy blur hides sensitive details when sharing screens.

Responsible AI

AI features are off by default, run in enclosed environments and never send student data out without your consent.

Compliance and certifications

GDPR and Australian Privacy Principles compliant, on ISO 27001-certified AWS infrastructure, with SELMA's own ISO 27001 certification under way.

Independent penetration testing

Independent specialists test SELMA regularly, and customers can request the latest results and remediation status.

Defence in depth

Firewalls, DDoS protection, malware-scanned uploads and 24/7 monitoring, backed by a documented incident response plan.

Data protection by default

SELMA collects only what education management needs, uses it only for its stated purpose and flags data past its retention period.

Continuous improvement

Regular audits, threat monitoring, staff training and regulatory tracking keep these protections current.

Your security partnership

Questions about security?

Ask for our security documentation, current penetration test results, questionnaire responses or certification status.

Contact our security team

Security documentation

Detailed documentation of SELMA's security posture for your own risk assessments and compliance obligations.

Security questionnaires

Prompt, detailed answers to your institution's security questionnaires.

Data processing agreements

Formal agreements that set out responsibilities, obligations and rights for your data.

Incident communication

Timely notice of any security incident affecting your data, so you can respond and inform stakeholders.

Security consultation

Guidance on setting up SELMA securely, from permission structures to authentication policies.

Run a compliant, scalable education operation on one professional platform.

See how SELMA handles enrolment, compliance and delivery in a 30-minute walkthrough.

Book a demo

See pricing