# Security Statement | Legal | SwaVid

Security practices and responsibility boundaries for SwaVid.

Canonical: https://www.swavid.com/legal/security

Source: https://swavid.com/legal/security

# Security Statement

## Table Of Contents

## Security Controls

## User Responsibilities

## No Absolute Security

## Security Governance

## Responsible Disclosure

## Related Legal Documents

Legal document | Last updated 20 June 2026

SwaVid protects educational and children data through administrative, technical, and organisational controls designed for a learning platform handling sensitive student context.

No technology service can guarantee absolute security. SwaVid maintains reasonable safeguards and improves them over time based on risk, product changes, legal requirements, and security review.

SwaVid security governance should include secure software development practices, access review, incident triage, vulnerability handling, dependency review, provider-secret control, logging review, backup and recovery planning, child-data risk review, and periodic review of authentication and authorisation paths.

Security controls must be proportionate to risk. Student profiles, parent dashboards, diagnostic reports, AI prompts, voice transcripts, school records, payment metadata, and support content require stronger controls than public marketing content.

Security researchers and users should report suspected vulnerabilities, exposed data, misconfigured access, authentication bypass, XSS, injection, broken access control, insecure direct object reference, provider-key exposure, or unsafe AI data leakage to info@swavid.com.

Reports should avoid accessing, modifying, downloading, deleting, or disclosing data beyond what is necessary to demonstrate the issue. SwaVid may request additional technical details and may prioritise reports based on severity and affected users.

The following documents form part of SwaVid's public legal framework and may be incorporated by reference where applicable. Formal notices and requests should be sent to info@swavid.com .

- 1 . Security Controls
- 2 . User Responsibilities
- 3 . No Absolute Security
- 4 . Security Governance
- 5 . Responsible Disclosure
- ( a ) Role-based account access and protected backend routes for sensitive student and parent data.
- ( b ) Authentication and ownership checks for student, parent, teacher, and school workflows.
- ( c ) Encrypted transport for production traffic.
- ( d ) Access logging, error logging, security monitoring, and incident review.
- ( e ) Input validation, rate limiting, and abuse-prevention controls on key APIs.
- ( f ) Provider-secret isolation on server-side systems where practicable.
- ( g ) Vendor due diligence and data processing terms where required.
- ( a ) Use strong credentials and protect devices.
- ( b ) Do not share login codes, passwords, or child account access.
- ( c ) Report suspected account compromise, unsafe content, or privacy incidents to info@swavid.com.
- ( d ) Schools must manage authorised users and remove access for staff or students who no longer require it.
- Privacy Policy
- Terms and Conditions
- Children Privacy
- Cookie Policy
- Parent Consent
- Refunds
- Grievance
- AI Safety
- Sub-processors
- DPA
- Student Data
- Data Policy

## Key Links

- [SwaVid](https://swavid.com/)
- [Legal](https://swavid.com/legal/privacy-policy)
- [info@swavid.com](https://swavid.commailto:info@swavid.com)
- [Privacy Policy](https://swavid.com/legal/privacy-policy)
- [Terms and Conditions](https://swavid.com/legal/terms-of-service)
- [Children Privacy](https://swavid.com/legal/children-privacy-notice)
- [Cookie Policy](https://swavid.com/legal/cookie-policy)
- [Parent Consent](https://swavid.com/legal/parent-consent-notice)
- [Refunds](https://swavid.com/legal/refund-cancellation-policy)
- [Grievance](https://swavid.com/legal/grievance-redressal)
- [AI Safety](https://swavid.com/legal/ai-safety-disclaimer)
- [Sub-processors](https://swavid.com/legal/sub-processors)
- [DPA](https://swavid.com/legal/data-processing-addendum)
- [Student Data](https://swavid.com/legal/student-data-protection-agreement)
- [Data Policy](https://swavid.com/legal/data-policy)