What the office has to know, and only the office
Allergies, conditions, medication and consent on the child's record, with every visit to the school office logged — who came, what happened, whether a parent was called.
Medical data is special-category data under the GDPR, so it is not simply another tab: access is controlled at the field level, separately from the rest of a child's record, and every read of it is as auditable as every write.
For the office
What a secretary, a bursar or a head of year can do with it.
- Allergies, conditions, medication and consent on the child
- Every visit to the office logged, with what was done and whether a parent was called
- A trip list that shows the allergies of the children going, before they get on the bus
For whoever has to approve it
Where the data sits, who can read it, and what it connects to.
- Field-level access control, separate from general student read
- Special-category data under Article 9, held in the EU, with an audit trail on access
Questions we are asked
- Who can see medical information?
- Only the roles you grant it to. It is a separate permission from seeing the child's other records.
- Is this enough for GDPR?
- It is the technical half — EU hosting, isolation, field-level control and audit. We sign a DPA for the rest.
See it with your own school's data
Sixty days free, no card up front — or open a ready-made demo school and click around it first.