We take GDPR seriously
PESEL numbers, consents, contracts and payments are data your school is responsible for. Here is how Tootor helps protect them – in concrete terms, without jargon.
What protects your school's data
A separate database for every school
Your school's data is kept separately, not mixed with other schools' data. It can't leak from one school into another.
Encrypted PESEL numbers
PESEL numbers (Polish national ID numbers) are encrypted in the database with AES-256.
Two-step sign-in
A code arrives by e-mail when you sign in. Trusted devices mean you don't have to type it every time.
Automatic sign-out
Sessions end on their own after a period of inactivity.
Password guessing blocked
After repeated wrong passwords, sign-in is blocked.
Admins only from school
You can limit administrator accounts to your school's IP addresses.
Consents and refusals with date and IP
Every consent and every refusal is recorded with its wording, date and IP address. One screen shows who agreed to what.
Contracts archived unchanged
A signed contract stays exactly as the client saw it – even if you change the template later.
Support without your password
The Tootor team can help your school without ever needing your account password.
What it means on an ordinary school day
Security only makes sense when it works on its own – without extra work for the office.
-
A parent asks what they agreed to?Open the consents screen and see the wording, date and IP address – refusals included.
-
A classroom computer was left signed in?The session expires on its own after a period of inactivity.
-
Someone is guessing passwords?Repeated wrong attempts are blocked. On top of that there is two-step sign-in with an e-mail code.
-
Fonts without GoogleThe panel's fonts are served from Tootor's own server, so visitors' addresses aren't sent to Google.
Ask us directly
We describe the specific safeguards that work in Tootor. If you need more detail for your school's GDPR documentation, write to hello@tootor.app.