Privacy & Security Overview for Australian Schools
PIPS is a positive-behaviour and house-points platform for schools. We treat the protection of student and staff information as a core part of the product. This overview summarises how PIPS keeps your school's data safe and private.
Data protection & access controls
School-level data isolation
Each school's data is fully isolated at the database level using row-level security. Staff at one school can never see another school's students, classes or records — isolation is enforced in the data layer, not just hidden in the interface.
Role-based access
Super-admin, school administrator and teacher roles. Teachers only access their assigned classes; administrators manage only their own school.
Least privilege
Each user is granted only the permissions their role requires (least-privilege), with per-user capability controls.
Infrastructure, encryption & authentication
Certified infrastructure
PIPS runs on the Base44 (a Wix company) platform, which is SOC 2 Type II and ISO 27001 certified and independently penetration-tested.
Encryption everywhere
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Secure sign-in & SSO
Sign-in via Single Sign-On (Google / Microsoft) or email and password, so schools can use their existing identity provider.
Payments
Card data never touches PIPS. All subscription payments are processed by Square (PCI-DSS Level 1). PIPS never sees or stores card numbers — only a subscription status.
Questions from your IT or business team?
We're happy to answer privacy and security questions or provide our Data Processing Agreement on request.