Data Security

Service provider

Loudwater is provided by Blundens Ltd (company number 14230311), whose registered office is at 483 Green Lanes, London, N13 4BS. Contractual security commitments are set out in the applicable customer agreement, Data Processing Agreement and Information Security Schedule.

Security principles

• Least-privilege access with role and module-based permissions.
• Defense-in-depth across application, infrastructure, and identity layers.
• Continuous monitoring for reliability and security events.

Technical safeguards

• Encryption in transit (TLS) and encryption at rest.
• Durable audit evidence for reviewed sensitive operations.
• Secure authentication flows and session protection controls.
• Regular patching and dependency maintenance practices.

Operational controls

• Documented incident response and recovery procedures.
• Controlled change management and deployment workflows.
• Data minimization and retention controls aligned to education use.

School responsibilities

Schools should maintain strong internal account governance, including staff onboarding/offboarding controls, role reviews, and safeguarding access checks.

Security contact

For security-related requests, contact support@blundens.com.