Sijillak — Privacy
The school system of record. Strictly an administrative system, with no guardian accounts.
Last updated
The short version
Sijillak is the school's own record system. Everything in it is entered by the school, belongs to the school, and is controlled by the school. We host and maintain it.
There are no guardian logins in Sijillak, by design. Families never sign in to it. A school that uses only Sijillak communicates with families through documents it produces.
What is held
- Student records
- Enrolment, class and stage, and the academic and administrative records the school maintains.
- Guardian details
- Contact details held as part of a student record, so the school can reach a family. Not an account.
- Staff records
- Employment and role information the school maintains about its own staff.
- School documents
- Letters, reports and certificates the school generates.
- Operational logs
- Who changed what and when, which is an accountability feature of a record system rather than an optional extra.
Each school is separate
Every school runs on its own site under its own subdomain, with its own data. One school cannot query, browse or report on another school's records.
Staff sign-in
Staff sign in to Sijillak directly. Where a school also subscribes to Anseraf, staff may additionally sign in using their Anseraf identity; that is an added convenience and never the only way in, so a school is never locked out of its own records by a dependency on another product.
Where data is held
Our production servers are currently located in Germany, operated on infrastructure we manage ourselves rather than on a third-party school-software platform. Some supporting services — email delivery, DNS and content delivery — may process data in other countries.
Because this places personal data outside the Kingdom, it is a cross-border transfer under the Personal Data Protection Law. We rely on the transfer being necessary to perform the agreement with the school, and we apply contractual and technical safeguards to it. If you require data residency inside the Kingdom, tell us before you subscribe: it is a deployment question, not a policy one.
Your rights
Under the Personal Data Protection Law you may ask to be told what personal data is held about you, to obtain a copy of it, to have it corrected, and in defined circumstances to have it destroyed. You may also withdraw a consent you previously gave.
For anything held on behalf of a school — a student record, an attendance or dismissal event, a guardian relationship — the school is the controller and decides. Send those requests to the school; we will support the school in answering them. For data we hold in our own right, such as an enquiry you emailed us, write to us directly and we will respond.
Export and exit
A school's records are the school's. On request during an active subscription, or at the end of one, we provide an export in a usable format. We do not hold a school's data hostage to a renewal.
Contact
Questions about this page, or about data held in Sijillak: [email protected]. If you are a parent, ask your school first — it is the controller of these records and we act on its instructions.