Security & Compliance
Your data stays yours.
Institutions across Eswatini trust Shunifu with their students, staff, and financial data every day. Here's how we protect it.
Infrastructure
How Shunifu keeps your data isolated and protected
Your data stays isolated, encrypted, and under your control.
Dedicated Tenant Databases
Each institution gets its own isolated database. Your data is never co-mingled with another school's, not in shared tables and not in shared rows. Complete separation.
Role-Based Access Control
25+ configurable user roles (principals, teachers, HODs, finance officers, parents), each seeing only what they should. Permissions are granular down to individual actions.
Encryption Everywhere
TLS encryption protects all data in transit. Backups are encrypted at rest. Sensitive fields like financial records receive additional application-level encryption.
Cloud Hosting & Backups
Hosted on cloud infrastructure with regular backups and monitored uptime.
Full Audit Trails
Every critical operation is logged: who did what, when, and from where. Audit trails are retained and available for compliance reviews on request.
Data Export & Portability
Your data belongs to you. Export student records, financial data, and reports at any time. Full data portability is available on request. No lock-in.
Compliance
Compliance and data protection
Data Protection Act 2022
Shunifu is designed to comply with the Eswatini Data Protection Act 2022, which governs the processing and protection of personal data. Key provisions we adhere to:
- Lawful processing (Section 9): personal data processed only for legitimate educational purposes
- Data minimization (Section 14): only data necessary for school operations is collected
- Security safeguards (Section 17): technical and organizational measures to prevent unauthorized access
- Data subject rights (Sections 32-33): access, correction, and deletion rights supported
Government Trust & Recognition
Shunifu operates from the Royal Science & Technology Park (RSTP) with support from UNDP Eswatini. Our platform has been adopted by government institutions and recognized in ministerial reports for transforming education through technology.
- William Pitcher College
- Ngwane Teachers Training College
- Eswatini College of Technology
- National Handicraft Training Centre
In practice
How we protect student data
Here is what that looks like in day-to-day operation.
School data is physically separated
When a school joins Shunifu, a dedicated database is provisioned exclusively for that institution. There is no shared data layer between schools, even at the infrastructure level.
Access is strictly role-controlled
A teacher can see their own classes. A parent can see only their child. A finance officer can process fees but not view marks. Every permission is explicitly configured. Nothing is open by default.
Every action is logged
Mark changes, fee adjustments, student record updates, all tracked with who, what, when. These logs are available to school administrators for internal review and compliance.
Your data is always exportable
Reports, student records, financial data, all exportable at any time. If you ever leave Shunifu, we provide a complete data export. No lock-in, no barriers.
Common questions
Security FAQ
Questions about security?
We're happy to walk through our security practices in detail. Book a call and we'll answer everything.
Free to start · We set your school up · No commitment