Authentication
Secure sign-in with password policy, reset and invitation flows for school users.
Security
Practical safeguards for school data.
IlimiDesk is operated with security controls that match a multi-tenant school platform: who can sign in, what each role can do, how files are stored and how production data is backed up.
Implemented controls
Role-based access
Separate administrator, teacher, parent and student experiences with role checks on sensitive actions.
School-level data isolation
Multi-tenant design keeps each school’s records scoped to that school.
Audit logging
Administrative actions can be reviewed in audit logs for operational accountability.
Secure cloud file storage
School files are stored in private object storage and served through authorised download paths.
Encrypted database backups
Production backups are encrypted before upload to private cloud storage.
Disaster recovery practice
Backups are designed for restore to scratch environments as part of operational recovery.
Production monitoring
Health checks and request correlation support production operations.
How we talk about security
This page describes controls that exist in the platform and its production operations. It is not a substitute for a formal security questionnaire or contractual commitments. For school due-diligence requests, contact us and we will share what we can under NDA.