Security in the platform
Skoolie offers a secure platform for study and career guidance. Our cloud-based solution is built on robust infrastructure and strict security processes in line with leading industry standards. We prioritise user privacy and work continuously to meet and exceed the requirements of the GDPR. Through carefully designed security procedures and regular internal and external audits, we ensure the platform can be used with confidence.
Your data always stays within the EU
We prioritise user privacy and work continuously to meet and exceed the requirements of the GDPR. To ensure full GDPR compliance and avoid the risks associated with data transfers outside the EU/EEA, all personal data is stored in European data centres.
Skoolie offers clear, adaptable data processing agreements based on standard templates from SKR (the Swedish Association of Local Authorities and Regions). The agreements clearly define roles, responsibilities and obligations, and we ensure a structured process for handling and reporting personal data, with regular follow-up and audits.
Security
To ensure a stable and reliable user experience, we use Microsoft Azure as our primary cloud infrastructure. This enables high scalability and robust operations. Through advanced, continuous monitoring, automatic incident notifications and rapid response plans, we have maintained an uptime that consistently exceeds 99.9%.
Information security is central to everything we do at Skoolie and is managed systematically through our Information Security Management System based on ISO/IEC 27001.
Our platform uses TLS 1.2+ for all data in transit and AES-256 encryption for data at rest. We regularly carry out penetration tests and security assessments, work exclusively with certified subcontractors, and maintain continuous monitoring of system logs and incident management.
The EU AI Act
The EU Artificial Intelligence Act (AI Act) ensures that AI systems are safe, transparent and respect fundamental rights. Under the regulation, AI systems are divided into four risk categories based on their application: prohibited, high, limited and minimal risk.
Under Annex III ('Education and vocational training'), AI systems that e.g. handle admission to or assessment within education are classified as high risk. Skoolie's AI chatbot, which only provides input for study and career guidance without making any formal decisions, is classified by us as a limited-risk system.
