--- title: 'Security built for the realities of schools.' description: 'How Nurture keeps your school data safe — security practices, data processing agreements, GDPR compliance and privacy documentation for schools.' canonical: 'https://www.gonurture.com/security' siteGuide: 'https://www.gonurture.com/llms.txt' --- Trust & security How Nurture keeps your school data safe — security practices, data processing agreements, GDPR compliance and privacy documentation for schools. [Explore our documents](#documents) [Contact our team](https://www.gonurture.com/contact-us.md) Our security posture ## Trust is part of the product, not paperwork added later. Nurture works with schools, Multi-Academy Trusts and data protection officers to protect personal data and make security reviews straightforward. ### Data protection GDPR-aligned processing with a Data Protection Agreement available to schools. ### Secure development Security is considered throughout how the platform is designed, built and shipped. ### Incident readiness Dedicated security and AI incident response plans support detection, containment and communication. ### Service resilience Patch management and disaster recovery processes help keep systems current and recoverable. How we protect the service ## Clear responsibilities across platform, process and people. ### Protect data Policies and controls protect the confidentiality, integrity and availability of school data. Information security ### Process responsibly GDPR documentation explains how personal data is handled and the commitments available to schools. Privacy & GDPR ### Know our suppliers We publish the third-party suppliers and sub-processors involved in delivering Nurture. Transparency ### Prepare and recover Response, patching and recovery plans guide how we act when systems or services are disrupted. Operational resilience Legal foundations ## The documents schools need first. Review the terms governing the service, how personal data is handled, and our GDPR and DPA commitments. [ 01 ### Terms of Use How schools and users access and use the Nurture platform. Read the terms](https://www.gonurture.com/legal/terms-conditions.md)[ 02 ### Privacy Policy How we collect, use, store and protect personal data. Read the policy](https://www.gonurture.com/legal/privacy-policy.md)[ 03 ### GDPR & DPA Our GDPR approach and the Data Protection Agreement available to schools. Review GDPR & DPA](https://www.gonurture.com/legal/gdpr.md) Security library ## Review how we operate. Our security policies, processes and supplier list are available to review in full. Each document opens in a new tab. [List of Third Party SuppliersThe sub-processors and suppliers involved in delivering the Nurture service.](https://docs.google.com/document/d/1whAME-ndYpmzDJFRUUUeav-MdipMxmcJDDZUbYC4UfA/edit?usp=sharing) [Information Security PolicyThe controls protecting the confidentiality, integrity and availability of data.](https://docs.google.com/document/d/19yj4WyYsFChIqCTpzVAcHSbkqpQnGv8iXpFq85GS0mk/edit?usp=sharing) [Incident Response PlanHow we detect, respond to, contain and communicate security incidents.](https://docs.google.com/document/d/1RM_SN-YgHMqQXpp5PVtZTyLUBBdU8a2HEvZAbh4qxOE/edit?usp=sharing) [AI Incident Response PlanOur dedicated process for incidents involving AI systems.](https://docs.google.com/document/d/1ITbnkOiHE6yAlMil0cxXj7OI3VZqNJ8NXK_S7qOceqk/edit?usp=sharing) [Disaster Recovery PlanHow we restore service and recover data after major disruption.](https://docs.google.com/document/d/11_oH5IHQLAZGXxHhdMOV4X5Wlru4C009CsU7o8x8SwI/edit?usp=sharing) [Patch Management & StandardsHow systems are kept current and security patches are applied.](https://docs.google.com/document/d/1gwcuMtR802b5quYPHNs04GUAHG5jLS-WT4afRke78u0/edit?usp=sharing) [Secure Software Development LifecycleHow security is built into every stage of designing, building and shipping Nurture.](https://docs.google.com/document/d/18V_6DXIaPDazfYqHodBKd3VSkKWrFo3G2jC37t7DsmA/edit?usp=sharing) Need something specific? ## Bring us into your security review. Ask about our Data Protection Agreement, sub-processors, data storage or the requirements of your school, trust or data protection officer. We can help with - Data Protection Agreements and procurement documents - Sub-processor and data-storage questions - School, trust and DPO security reviews [Contact our team](https://www.gonurture.com/contact-us.md) [Read GDPR & DPA](https://www.gonurture.com/legal/gdpr.md) Make feedback matter ## Talk through your security requirements. Our team can help with data protection questions, DPAs, sub-processors and your school’s review process. [Book a demo](https://www.gonurture.com/request-demo.md)