Privacy & security
Student records that never leave school.
Most school software keeps your data on someone else's server. Insight keeps it on yours, and is built to protect it there.
No internet, by design
Insight has no online mode. Every web request is cancelled inside the app, and the page itself is only allowed to talk to the app. Nothing is uploaded, synced or reported.
Your data, on your computer
All records live in one database file in the Windows account that runs Insight. No outside company holds a copy.
Locked-down application
The interface runs in a sandboxed window with no access to the computer beyond a short list of actions Insight needs. The installed program cannot be started in debugging modes, and it checks its own files have not been altered.
Daily and encrypted backups
A backup every day, the last seven kept. Encrypted backups use AES-256 with a key derived from your password; without the password they cannot be opened, even by us.
Safety copies and recovery
A safety copy is saved before every restore, reset, new year and update. If the data file is damaged, Insight writes nothing to it and offers the latest good backup.
An Admin PIN and a record of changes
One 6-digit Admin PIN, set during setup, protects unlocking marks, restoring, changing declared results, a new year and updates. It is stored only as a slow, salted hash, with a one-time recovery code for a forgotten PIN. Wrong PINs bring growing waits; 15 in a row lock the protected actions until a signed unlock file from your provider, made for that one computer. Every change to marks, and every wrong PIN, is recorded.
Signed licences and updates
Licences and update files carry a digital signature. Insight refuses a licence or update that has been changed or does not come from Insight.
Reviewed and tested
Insight's security was reviewed for this release, its components were updated, and automated tests check that network access stays blocked and the app's bridge stays closed.
Plain facts
What you should also know.
Keeping data on your own computer also means looking after that computer. These are the honest limits.
| Backups off the computer | Automatic backups are kept on the same computer. Copy a backup to a pen drive regularly, and keep it somewhere else. |
|---|---|
| Windows account | The database is protected by the computer's own security. Use a Windows password, and BitLocker where available. |
| Admin PIN | The Admin PIN stops accidental and casual changes inside Insight. They are not a replacement for keeping the computer itself secure. |
| Forgotten passwords | An encrypted backup's password cannot be recovered. Write it down and keep it safe. |
Questions about your data?
We are happy to walk your management through exactly how Insight stores and protects it.