How Trellis protects pupil data

16 July 2026

Trellis records sensitive conversations about children. We protect the recording, the transcript and the paperwork that follows to the standard a local authority or MAT expects of its own internal systems.

Five independent controls, each in a different place

Every request crosses several separate guardrails before it can reach pupil data. A mistake in one layer is caught by the next, so no single failure exposes a child's records.

‍
‍

Concentric rings showing five independent layers of protection around pupil data: identity, network, encryption, trust boundary and isolation.

‍

Security built into every layer

Your identity, your rules

Staff sign in with Microsoft Entra ID. Multi-factor authentication, conditional access and session policies stay in your tenant, under your control. Trellis never handles a password.

Locked to your networks

A web application firewall and a per-authority IP allowlist mean only your people, on your approved networks, ever reach the login page.

Encrypted end to end

Audio is encrypted on the teacher's device before it is uploaded, and everything is encrypted in transit and at rest.

Checked on every action

Every read and write passes through a single trust boundary, with row-level security and an automatic, tamper-evident audit trail.

Isolated by design

Live, trial and development systems run in separate Azure subscriptions and networks. Developers have no access to production data.

Hosted in the UK

Data is processed and stored in Microsoft Azure's UK South region and does not leave the United Kingdom under normal operation.

Checked by experts, continuously

ISO 27001

Certified against the international standard for information security management, covering the production service and its supporting systems.

Penetration testing

An accredited third-party security firm tests Trellis four times a year, with every finding tracked to closure.

Continuous controls

Dependency scans, static analysis and infrastructure reviews run on every change, and every production deploy must pass them.

Evaluating Trellis for your local authority?

We share a full security overview, covering our trust-boundary architecture, encryption, retention and deletion, audit trail, sub-processors and a data processing agreement, with prospective customers on request. Request the full overview

‍