How Trellis protects pupil data

16 July 2026

Trellis records sensitive conversations about children. We protect the recording, the transcript and the paperwork that follows to the standard a local authority or MAT expects of its own internal systems.

Diagram showing pupil data at the centre, enclosed by row-level security inside the database.

Five independent controls, each in a different place

Every request crosses several separate guardrails before it can reach pupil data. A mistake in one layer is caught by the next, so no single failure exposes a child's records.

‍
‍

Concentric rings showing five independent layers of protection around pupil data: identity, network, encryption, trust boundary and isolation.

‍

Security built into every layer

Your identity, your rules

Staff sign in with Microsoft Entra ID. Multi-factor authentication, conditional access and session policies stay in your tenant, under your control. Trellis never handles a password.

Locked to your networks

A web application firewall and a per-authority IP allowlist mean only your people, on your approved networks, ever reach the login page.

Encrypted end to end

Audio is encrypted on the teacher's device before it is uploaded, and everything is encrypted in transit and at rest.

Checked on every action

Every read and write passes through a single trust boundary, with row-level security and an automatic, tamper-evident audit trail.

Isolated by design

Live, trial and development systems run in separate Azure subscriptions and networks. Developers have no access to production data.

Hosted in the UK

Data is processed and stored in Microsoft Azure's UK South region and does not leave the United Kingdom under normal operation.

Checked by experts, continuously

ISO 27001

Certified against the international standard for information security management, covering the production service and its supporting systems.

Penetration testing

An accredited third-party security firm tests Trellis four times a year, with every finding tracked to closure.

Continuous controls

Dependency scans, static analysis and infrastructure reviews run on every change, and every production deploy must pass them.

Evaluating Trellis for your local authority?

We share a full security overview, covering our trust-boundary architecture, encryption, retention and deletion, audit trail, sub-processors and a data processing agreement, with prospective customers on request. Request the full overview

‍

Andy

More from the blog

October 6, 2026

ISPs are coming. Can AI help you focus on pupils, not paperwork?

Introduction of the new, statutory Individual Support Plans under the SEND reforms aim to bring welcome clarity and consistency. But unless implementation is carefully designed, ISPs could create a paperwork ripple effect - can AI help?

Natalie

September 28, 2026

Using your Inclusive Mainstream Fund with Trellis

The Department for Education's new Inclusive Mainstream Fund (IMF) is designed to help mainstream schools strengthen inclusive practice and improve support for pupils with SEND.

Andy

September 18, 2026

Get Trellis in your school this autumn - new trials in England

We know that writing up SEND meeting minutes and support plans can feel like a full time job on its own - as well as making it harder for you to be fully present with learners and their families.

Andy