Stored and processed in the UK
Our database runs in London and so does the code that serves it. We measured where our servers actually run rather than taking a provider's default on trust.
For IT and data protection leads
Easy for IT. Reassuring for your DPO.
Everything your IT team and data protection officer will want to know, in one place. Inside the staff hub, the same details sit on one page with an "Email this to your IT team" button.
UKDatabase and servers both in London
0Adverts, trackers or data sales
30Days to erase a school's data after it leaves
48hAt most, to tell your school about a data breach
Data protection
Privacy enforced where it counts.
Row-level security in the database
A pupil can only ever read their own check-ins, and staff only their own school's. That's enforced by the database itself, so a mistake in an app screen can't leak another pupil's data.
Tamper-evident audit log
Every change to settings, staff and pupils is recorded, and the log can be checked for tampering.
Clear retention
When a school leaves, its data is erased within 30 days. Signed agreements are kept for six years, as the law requires.
Named sub-processors
Every company that handles data for us is listed in our privacy policy, with what it does and where.
Send Signals Limited is registered with the ICO (ZC138681). The optional staff help assistant uses Anthropic's Claude and can be switched off by the school.
Sign-in
No new passwords for anyone.
Pupils don't need an email address, and staff don't need another password.
Pupils
A login code or QR card, or their school Microsoft, Google or Apple account. A fob is linked to its pupil by staff.
Staff
A short sign-in code sent to their school email. Codes expire, and access levels are set per person.
Your MIS
Connected to your MIS, read-only.
Pupils, staff and timetables come in through Wonde, which connects to the major UK MIS. We only ever read. Nothing is written back to your MIS.
No Wonde? Export a file from your MIS and upload it, or add pupils by hand.
Your MIS
Wonde
Send Signals
Your network
What your network needs to allow.
Short and specific. The full list, with copy buttons, is in the staff hub under Settings, School IT.
Web filtering
Allow app.sendsignals.co.uk and our database host, for staff and for pupils on school devices. Please don't put HTTPS inspection in front of either, because live updates rely on a secure connection.
Staff sign-in codes come by email. Allow our sending domain so codes aren't held back by a filter. In Microsoft 365, the Tenant Allow/Block List covers everyone at once.
Fobs on Wi-Fi
2.4 GHz Wi-Fi with a password (WPA2 or WPA3), an open network, or WPA2-Enterprise with PEAP and MSCHAPv2. A server certificate is compulsory for enterprise, so a fake access point can't collect the password.
Fob traffic
Outbound HTTPS on port 443 to app.sendsignals.co.uk, and time sync on UDP port 123. Fobs can't sign in through a captive portal, and they won't send through HTTPS inspection.
Known devices
Each fob appears on your network as sendsignals-fob followed by six characters of its MAC address. The hub lists every fob's MAC for your router or allow list.
Lost devices
A fob reported lost stops working at once. If it stays lost for more than a day, it forgets its saved Wi-Fi, including the enterprise login.
Accessibility
Accessibility comes first, not last.
Screen reader labels throughout, high contrast colours, ratings shown by shape as well as colour, and nothing that depends on motion. The pupil screens never change their layout.
Need something for your DPO or IT team?
Email us and we'll send our data processing agreement, privacy policy and IT pack, or set up a call.