Security
How Clever Nursery protects children's data
A nursery holds some of the most sensitive information there is: children's health, family situations, photos. This page describes exactly what Clever Nursery does to protect it, and what we have not documented yet.
Access control
Every person has one role per nursery. The app hides what a role may not use, and the server refuses it anyway.
Roles with clear limits
Director, administrator, educator and accountant roles, each with a defined set of permissions.
Enforced on the server
Permissions are checked by the server on every request, not only hidden in the interface.
Nurseries sealed off from each other
Each nursery's data is invisible to every other nursery. An automated test checks every nursery route for this.
Who sees what, by role
| Who sees what, by role | Director | Administrator | Educator | Accountant |
|---|---|---|---|---|
| Children's records | All, including health | All, including health | Children of their classrooms, including allergies and health | Names and families only, never health data |
| Attendance and daily care | All | All | Their classrooms | No access |
| Families | All | All | Families of their children | All, for billing |
| Admissions | All | All | No access | No access |
| Team, roles, settings, backups | Full control | Can invite educators; no roles, settings or backups | No access | No access |
Rules specific to children's data
Beyond roles, Clever Nursery applies rules designed for childcare.
Health data stays with those who care
Health information and allergies are never shown to accountants, and are flagged to the staff who look after the child.
Photos follow consent
A family receives a photo only when their own child is tagged in it and every other tagged child has photo consent. Untagged photos stay with the team.
Custody is respected
A guardian without custody never receives information about the child.
Safe handovers
Check-out is recorded against the people authorized to collect the child, and the app warns when no one is authorized.
Secure sign-in
Two-factor authentication
Each user can protect their account with a one-time code from an authenticator app.
Passkeys
Sign in with the fingerprint, face or PIN of your device instead of a password.
Single sign-on for larger organisations
Enterprise deployments can connect their own identity provider (OIDC).
Protection against abuse
Sign-in and public forms, such as online pre-registration, are rate-limited.
Your data, under your control
Export at any time
Every list can be exported, so your information is never locked in.
Full backup
The director can download a complete backup of the nursery as a ZIP file.
Encrypted in transit
All traffic between your browser and Clever Nursery uses HTTPS.
Never locked over a limit
Your data is never deleted or locked because you exceed a plan limit.
What we have not documented yet
We prefer to be precise. The hosting provider and location, and any certification, will be published here once confirmed. Until then, we do not claim them.
How is children's data protected?
Access is based on roles and enforced by the server: educators see only their classrooms, accountants never see health data, a family never receives another child's photo without consent, and a guardian without custody receives nothing. Each nursery's data is isolated from all others, and accounts can use two-factor authentication or passkeys.
Where is the data hosted?
Clever Nursery runs on a server operated by our team, and all traffic is encrypted with HTTPS. We will publish the hosting provider and location on the security page once they are confirmed in writing. Enterprise customers can request a specific data residency.
Can I export my data?
Yes. Every list can be exported (CSV on all plans, Excel on paid plans), and the director can download a full backup of the nursery as a ZIP file at any time.
Is Clever Nursery certified or compliant with a specific law?
Clever Nursery does not hold a security certification today, and we do not claim compliance with a specific regulation on this site. We describe precisely what the product does to protect data on the security page, and we answer questions from your legal advisers.
Ready to simplify your childcare management?
Create your nursery in a few minutes, import your lists, and run tomorrow's roll call from a phone.
Free plan with no time limit. No card needed.