Our security posture
Trust is part of the product, not paperwork added later.
Nurture works with schools, Multi-Academy Trusts and data protection officers to protect personal data and make security reviews straightforward.
Data protection
GDPR-aligned processing with a Data Protection Agreement available to schools.
Secure development
Security is considered throughout how the platform is designed, built and shipped.
Incident readiness
Dedicated security and AI incident response plans support detection, containment and communication.
Service resilience
Patch management and disaster recovery processes help keep systems current and recoverable.
How we protect the service
Clear responsibilities across platform, process and people.
Protect data
Policies and controls protect the confidentiality, integrity and availability of school data.
Information security
Process responsibly
GDPR documentation explains how personal data is handled and the commitments available to schools.
Privacy & GDPR
Know our suppliers
We publish the third-party suppliers and sub-processors involved in delivering Nurture.
Transparency
Prepare and recover
Response, patching and recovery plans guide how we act when systems or services are disrupted.
Operational resilience
Legal foundations
The documents schools need first.
Review the terms governing the service, how personal data is handled, and our GDPR and DPA commitments.
Security library
Review how we operate.
Our security policies, processes and supplier list are available to review in full. Each document opens in a new tab.
Need something specific?
Bring us into your security review.
Ask about our Data Protection Agreement, sub-processors, data storage or the requirements of your school, trust or data protection officer.
We can help with
- Data Protection Agreements and procurement documents
- Sub-processor and data-storage questions
- School, trust and DPO security reviews