Two-step sign-in for everyone
Authenticator app, phone approval with number matching, or email code. SMS is never used and 2FA cannot be switched off.
Security & trust
Children's data deserves the highest protection
Two-step sign-in for every user, school-by-school isolation, and a Trust centre that refuses fabricated SOC 2, ISO or VPAT seals.
Open the Trust centreRequest our DPA
Every school isolated
Each school’s records are separated. Cross-tenant reads are defects. Canary probes are published on the Trust centre when they run in production.
Tamper-evident audit trail
Sensitive views and changes are recorded. This page does not claim an independent penetration test that has not been completed.
Two-person approvals
Large refunds, payment-account changes and restores need a second, different approver.
Encryption in transit and at rest
Data is encrypted in transit and at rest. Health and safeguarding records are visible only to the roles that need them.
Hardened hosting
School data is never exposed directly to the internet, and every request is checked before it reaches a school’s records. Schools remain the data controller.
Privacy by design
Schools are the data controller. SIGHTLEARN processes data on the school's instructions. Accounts sign in with a SIGHTLEARN password and two-step verification by default. A school or organisation may also turn on Microsoft sign-in; it is never the default.
Read the privacy notice