What must be settled before using real student data

School Base Cloud offers two public demonstration schools for Germany and Mauritius, with an administration interface and parent portal. All records are fictional. A successful demonstration does not authorise processing real student data.

What is evidenced today

The website self-hosts fonts, icons and page elements. Two separate demonstration schools each contain 24 fictional students, three classes and six role-based sign-ins. Public sign-ins and family access boundaries were checked over HTTPS. Automated tests cover roles, tenant protection, rate limits and blocking outgoing messages.

To be decided in writing before any real student data

Before real school data is processed, the parties must at minimum define the hosting location and operating model; data-protection responsibility and, where applicable, a data processing agreement; roles and authentication; backups and restore testing; encryption in transit and at rest; subprocessors; retention, deletion and export; and an incident and notification process. The agreements and checks required depend on the school, jurisdiction and exact use case, and their implementation must then be evidenced technically.

A demo is not customer operation

The public demos are shared test environments, not operating schools. Please do not enter personal data. School-specific templates and rules, complete translation, authentication for real users, mail delivery, banking processes, monitoring and contractual documents require acceptance for each customer's operation. A demonstration does not establish compliance with data-protection law.

Last updated 8 September 2026. Questions: hallo@schoolbasecloud.com