Meridian holds sensitive information about real children. Protecting it isn’t a feature bolted on at the end — it’s the foundation the whole platform is built on.
🇪🇺 EU data residencyHosted on secure cloud infrastructure within the European Union (Ireland). Your data is stored and processed in the EU — it does not leave.
🔒 Encrypted throughoutEvery connection is encrypted in transit with TLS, and all data is encrypted at rest (AES-256), end to end.
🧱 Each school isolatedEvery setting’s data is logically separated at the database level, enforced by PostgreSQL row-level security. One school can never see or reach another’s pupils.
👤 Role-based accessStaff only ever see what their role allows — class teacher, phase lead or senior leadership — with least-privilege access by default.
📋 GDPR-alignedDesigned around the UK GDPR and the Data Protection Act 2018, with your school as data controller and Meridian as its processor, under a DPA.
💾 Backed up & resilientAutomated daily backups with tested restore procedures keep pupil data both safe and recoverable.
Data protection & GDPR
- Lawful, minimal processing — only the data needed to track assessment and progress is held, following data-minimisation principles.
- Data subject rights — access, rectification, erasure and portability are supported, so requests from parents or staff can be actioned quickly.
- Retention & deletion — retention is configurable to your policy. On request, or at the end of our agreement, your data is returned and securely deleted.
- Sub-processors — a small, transparent set of GDPR-compliant infrastructure providers; the current list is available on request.
- AI features, handled carefully — pupil data is never used to train third-party AI models, and AI features can be turned off.
- Infrastructure assurance — built on cloud platforms holding independent certifications such as SOC 2 and ISO 27001.
Your data is yours. You can export your full dataset at any time in standard formats. We never sell your data, never use it for advertising, and never share it beyond the processors needed to run the service. No lock-in, no surprises.
Need our full security overview or a Data Processing Agreement? Email info@meridiantech.info.
© Meridian Technology Ltd · Meridian™ and the diamond device are trade marks of Meridian Technology Ltd.