Keeping your data safe
We take data very seriously at Arbor and are proud to exceed the industry standard when it comes to protecting your school or MAT
Digital and Physical Security
- We’re fully cloud-hosted in Amazon Web Services’ London data centre
- We store, process and manage all personal data and backups in the UK
- We encrypt your data in Transit and At Rest using bank-grade 256-bit SSL
- Our servers are patched continuously to reduce security vulnerabilities
- We maintain physical security at every Arbor office using access control, secure keys, CCTV, 24/7 security personnel and secure perimeter doors
- We are certified to the latest PCI DSS 4.0, giving your payments the highest level of security
- We are ISO 9001 certified, showing our commitment to delivering consistent quality in our products and services
Our Certificates
We meet and exceed all criteria set out in the DfE’s cloud supplier checklist, and are on the UK Government G-Cloud list of approved cloud suppliers



Arbor MIS and GDPR
How our MIS helps your school or MAT comply with GDPR
Permission-based access
Only view data in line with what’s relevant to your role. Role-based access control (RBAC) allows schools to manage each staff member’s permissions
Secure logins for every user
Choose from a range of additional security features, including password rules, enforced regular password changes, and two-factor authentication. Arbor also automatically logs out after a period of inactivity
Easily retrieve data to comply with Subject Access Requests
Download a complete record of all data stored in Arbor about a student or staff member directly from their profile page
Data quality dashboard to help keep your system updated
Arbor will automatically flag records that are missing key information and potential duplicates, and the Data Retention page will help you delete unnecessary data