Data Protection: Our entirely cloud-based software is hosted by dedicated AWS servers located in Sydney, Australia. Next generation encryption technologies ensure Customer data and privacy are maintained, and daily local AWS data backups and storage facilitate increased data security, reliability and accessibility for our users.

Access Principles: MFA via Microsoft Authenticator or Google Authenticator app for local login, or via Microsoft Azure SSO authentication technology strengthens digital security for our users. We adopt a zero-trust stance, with RBAC governed by PoLP underpinning each of our user account type access principles, in alignment with NIST and ASD frameworks.

Software Integrity: Our Agile model security patching supports security, compliance and software efficiency. External penetration testing is undertaken to conduct scheduled deep scans and randomised light scans, and active load testing and diagnostic log monitoring ensures smooth operation for our users. Regular security patches and upgrades increase protection, maintain software integrity and provide peace of mind for our users.

Iterative Updates: Live software updates enhance security and improve user experience, while planned and communicated out-of-hours large scale rollouts prevent interruption to our users.

Data Ownership: Your school maintains sole ownership of data stored in FocusCS at all times. FocusCS acts strictly as the secure custodian of data for your school.

Data Privacy: Our user-facing timestamped audit logs automatically track case note progression for each individual entry, providing full transparency. FocusCS has an infinite retention policy, and our retention dashboard allows authorised user types to easily identify and schedule records (case notes, students) for purge in compliance with their own internal school policies and applicable jurisdiction requirements.

Strict Compliance: Policies and procedures informed and enforced by a cybersecurity qualified team, and underpinned by the NIST, OWASP, ASD, Essential Eight and CIA Triad frameworks and guidelines, to ensure ongoing compliance with the highest level of Australian data security standards. Ongoing, documented staff training led by our BCP, DPP, DRP, and IRP policies, including ASD and CISA tabletop simulations and DBP test restores.

ST4S Assessed: Version 3 assessed under the V2025.1 framework for Assessment Tier 1 by Safer Technologies 4 Schools (ST4S). Please contact your educational jurisdiction for any specific requirements or limitations pertaining to this ST4S assessment. See our website for further information.