How Trellis protects pupil data

16 July 2026

Trellis records sensitive conversations about children. We protect the recording, the transcript and the paperwork that follows to the standard a local authority or MAT expects of its own internal systems.

Diagram showing pupil data at the centre, enclosed by row-level security inside the database.

Five independent controls, each in a different place

Every request crosses several separate guardrails before it can reach pupil data. A mistake in one layer is caught by the next, so no single failure exposes a child's records.

‍
‍

Concentric rings showing five independent layers of protection around pupil data: identity, network, encryption, trust boundary and isolation.

‍

Security built into every layer

Your identity, your rules

Staff sign in with Microsoft Entra ID. Multi-factor authentication, conditional access and session policies stay in your tenant, under your control. Trellis never handles a password.

Locked to your networks

A web application firewall and a per-authority IP allowlist mean only your people, on your approved networks, ever reach the login page.

Encrypted end to end

Audio is encrypted on the teacher's device before it is uploaded, and everything is encrypted in transit and at rest.

Checked on every action

Every read and write passes through a single trust boundary, with row-level security and an automatic, tamper-evident audit trail.

Isolated by design

Live, trial and development systems run in separate Azure subscriptions and networks. Developers have no access to production data.

Hosted in the UK

Data is processed and stored in Microsoft Azure's UK South region and does not leave the United Kingdom under normal operation.

Checked by experts, continuously

ISO 27001

Certified against the international standard for information security management, covering the production service and its supporting systems.

Penetration testing

An accredited third-party security firm tests Trellis four times a year, with every finding tracked to closure.

Continuous controls

Dependency scans, static analysis and infrastructure reviews run on every change, and every production deploy must pass them.

Evaluating Trellis for your local authority?

We share a full security overview, covering our trust-boundary architecture, encryption, retention and deletion, audit trail, sub-processors and a data processing agreement, with prospective customers on request. Request the full overview

‍

Andy

More from the blog

September 8, 2026

Expanding Trellis across Scotland

Following the success of our initial pilot across seven local authorities, we are announcing a major contract extension with CivTech and the Scottish Government. Running from August 2026 to June 2027, this extension will support readiness for implementation at scale across Scotland's publicly funded schools.

Andy

Illustration of several different Child's Plan templates pinned to a board and linked by coloured string.

July 7, 2026

270 Fields and Counting: Finding the Essence in Scotland's Varied Child’s Plans

Across 19 Child's Plans templates, we found a total of 270 different fields. Our analysis reduces this variation to its essence.

Jasmine

Bar chart: post-meeting document preparation time falls from 83 minutes before Trellis to 26 minutes with Trellis.

June 15, 2026

Teacher Survey results

Teacher survey confirms average saving of 57 minutes per meeting and significantly better quality meetings.

Andy