Compliance & Security Hub

Your students' privacy is our absolute priority. Learn how we maintain 100% UK GDPR compliance.

Data Residency & Hosting

All AtTech 360 Tours are hosted on Krystal's UK-based "Katapult" cloud infrastructure. This guarantees that your school's data, imagery, and interactive assets never leave the United Kingdom, strictly adhering to UK GDPR data residency requirements.

Our infrastructure utilizes 100% SSD storage on the Emerald Plan, protected by robust network firewalls and enterprise-grade DDOS mitigation.

Data Transfer & Encryption

To ensure security from shoot to deployment, we employ rigorous transfer protocols:

SFTP (Secure File Transfer Protocol): All tour assets are uploaded to the servers using encrypted SSH tunnels (Port 22). No unencrypted FTP is ever permitted.
AutoSSL / Let's Encrypt: All tours embedded on your website are delivered via HTTPS to prevent man-in-the-middle interception.
CORS Protection: Tour iframes are configured to only allow embedding on your officially registered school domain, preventing unauthorized scraping.

Legal Templates & Onboarding Pack

We provide comprehensive documentation to support your administrative and safeguarding teams. Review our standard templates below:

Data Processing Agreement

Standard terms for processing media.

DPIA Checklist

Data Protection Impact Assessment template.

Parental Consent Form

Dual-layer consent for background vs close-up.

School Indemnity Form

School declaration of valid parental consent.

Terms & Conditions

Governs uptime, IP rights, and SLA.