Sectors
Private schools
Application and data-platform development for private schools. Integration of school management software, portals, digital services and financial systems, including interface and access design.
Admissions, academic records and school administration
School-system integration connects data that changes on different schedules. An application can become an enrolment, classes and courses are organised by academic year, and invoices follow their own payment schedules. Interfaces and data models preserve these relationships and the history of each record.
Examples of data processed in this sector
Students and families
Applications, enrolments, guardians and supporting documents form the administrative records.
Academic records
Classes, courses, assessments and reports describe academic progress by student, group and period.
Finance and services
Invoices, payments and school services are associated with family accounts and the relevant periods.
Documented practices and systems in Switzerland
Public sources describing organisational practices and software interfaces. PERINGER project references appear separately below.
Engineering services
Applications for school administration and families
Design of portals and web or mobile applications for viewing records, submitting documents and accessing school services. Interfaces and permissions are defined for the relevant users.
Custom software and applications →School software integration
Development of connectors between admissions, school management, learning platforms and accounting, using available APIs and exchange formats. Mapping of students, families, enrolments and academic years.
APIs and systems integration →Data warehouses and analytics
Warehouse modelling for student numbers, enrolments, activities and financial data. Development of pipelines and dashboards for comparison across periods, curricula or campuses, with consistent indicator definitions.
Data platforms and warehouses →AI and document resources
Document search, data extraction and assistants connected to learning or administrative resources. Responses reference the source documents and respect each user’s access permissions.
Document search and knowledge bases →Identity, hosting and operations
Account and group integration, SSO authentication and separate access permissions for records. Deployment of databases and services on-premises or in the cloud, with monitoring, backups and restore procedures.
Identity and access management →
Data protection and system security
The data-protection framework depends on the organisation’s status and processing activities. For processing subject to the revised Swiss Federal Act on Data Protection (FADP), security measures and protective defaults are defined from the design stage according to risk.
For a private school, the framework depends on its status and activities. Delegated public duties can bring cantonal law into scope. Health data is sensitive under the FADP. Access to academic, administrative and medical records is therefore defined separately for authorised users. Official source
Technical measures to define for the processing involved
- Record-level permissions, with access tests for families, teachers and administrators
- Multifactor authentication for administrative and remote access, encrypted transfers and application-secret management
- Retention by record category, access revocation, isolated backups and restore testing
Technical guidance · FDPIC · NCSC
Legal framework, providers and incidents
Purposes, retention and rights
The design specifies the data collected, its uses, recipients and retention periods. It provides for information to individuals and handling of access or rectification requests. Record-keeping and documentation duties are assessed against the processing involved and applicable exemptions.
Hosting and processors
An organisation remains responsible when it entrusts data to a provider. The assessment covers contracts, subprocessors, processing locations and access from abroad. Hosting outside Switzerland is possible subject to the applicable transfer safeguards.
Risk assessment and incidents
A data protection impact assessment (DPIA) is required when planned processing is likely to pose a high risk to individuals. The controller reports a data security breach to the FDPIC as soon as possible when it is likely to create a high risk to their personality or fundamental rights.
Related projects
Software and IT systems
Automation of enterprise-service administration
Develop administration automation tools for an Azure, Microsoft 365 and SharePoint environment used across multiple sites.
Software and IT systems
Intune inventory and device-estate reconciliation
Provide a consistent view of devices and configurations by reconciling information from several administration tools.
To go deeper
Discuss your project
A discussion of your project’s design, development and production deployment.