For IT and data protection leads
Easy for IT. Reassuring for your DPO.
Everything your IT team and data protection officer will want to know, in one place. Inside the staff hub, the same details sit on one page with an "Email this to your IT team" button.
Data protection
Privacy enforced where it counts.
- Pupil data stored in the UK
- Our database runs in London and so does the code that serves it. We check this ourselves.
- Row-level security in the database
- A pupil can only ever read their own check-ins, and staff only their own school's. That's enforced by the database itself, so a mistake in an app screen can't leak another pupil's data.
- Tamper-evident audit log
- Every change to settings, staff and pupils is recorded, and the log can be checked for tampering.
- Clear retention
- When a school leaves, its data is erased within 30 days. Signed agreements are kept for six years, as the law requires.
- Named sub-processors
- Every company that handles data for us is listed in our privacy policy, with what it does and where.
Send Signals Limited is registered with the ICO (ZC138681). The optional staff help assistant uses Anthropic's Claude and can be switched off by the school.
Sign-in
No new passwords for anyone.
Pupils don't need an email address, and staff don't need another password.
Pupils
A login code or QR card, or their school Microsoft, Google or Apple account. A fob is linked to its pupil by staff.
Staff
A short sign-in code sent to their school email. Codes expire, and access levels are set per person.
Your MIS
Connected to your MIS, read-only.
Pupils, staff and timetables come in through Wonde, which connects to the major UK MIS. We only ever read. Nothing is written back to your MIS.
No Wonde? Export a file from your MIS and upload it, or add pupils by hand.
Your network
What your network needs to allow.
Short and specific. The full list, with copy buttons, is in the staff hub under Settings, School IT.
Web filtering
Allow app.sendsignals.co.uk and our database host, for staff and for pupils on school devices. Please don't put HTTPS inspection in front of either, because live updates rely on a secure connection.
Staff sign-in codes come by email. Allow our sending domain so codes aren't held back by a filter. In Microsoft 365, the Tenant Allow/Block List covers everyone at once.
Fobs on Wi-Fi
2.4 GHz Wi-Fi with a password (WPA2 or WPA3), an open network, or WPA2-Enterprise with PEAP and MSCHAPv2. A server certificate is compulsory for enterprise, so a fake access point can't collect the password.
Fob traffic
Outbound HTTPS on port 443 to app.sendsignals.co.uk, and time sync on UDP port 123. Fobs can't sign in through a captive portal, and they won't send through HTTPS inspection.
Known devices
Each fob appears on your network as sendsignals-fob followed by six characters of its MAC address. The hub lists every fob's MAC for your router or allow list.
Lost devices
A fob reported lost stops working at once. If it stays lost for more than a day, it forgets its saved Wi-Fi, including the enterprise login.
Documents
Documents for your DPO and IT team.
Accessibility
Accessibility comes first, not last.
The pupil screens never change their layout.
- Screen reader labels throughout
- High contrast colours
- Ratings shown by shape as well as colour
- Nothing depends on motion
Need something for your DPO or IT team?
Email us and we'll send our IT pack, or set up a call.