SECURITY

Nursery Story’s Commitment to Product Security

At Nursery Story we pride ourselves on placing your securing at the top of our agenda. Early years settings, families and staff can rest assured, safe in the knowledge that all of your data is protected, secure, and won’t get lost. We take our responsibilities in looking after your information and data very seriously.

The below information describes how our technology and systems are built and maintained with security in mind.

Application Security Standards

Nursery Story Apps have been developed in accordance with OWASP (standing for the Open Web Application Security Project) security standards. These standards are a comprehensive set of rules and guidelines for securing web projects and are updated frequently, as new potential threats arise.

These security standards ensure that our platform is developed to block attacks from malicious entities, and to protect your data. To access more specific information on how we apply the OWASP security standards, click here.

Server and Database Security

Nursery Story uses Amazon Web Services (AWS) cloud infrastructure for all of its servers and databases. Using AWS means that we inherit the server and database security of one of the most secure cloud computing environments in the world. All data is stored encryption-at-rest, which means any data which is physically stored by AWS is encrypted and unreadable. For more information on Amazon’s security practices that Nursery Story benefits from, see this link.

Information Access

A Child’s information can only be accessed by the following parties:

• Nursery Setting Staff. A child’s information is added to a child’s profile or learning diary by the Nursery that they are attending.
• Parents of the child. A child’s nursery can choose to give access to a child’s profile information and learning diary to that child’s parents or guardians. Parents or guardians given express permission to view this data may do so through the Nursery Story Parent’s App. Once parents or guardians have been given access to the Nursery Story Parent’s App, they may, their sole discretion to share their child’s information with other family and relatives if they choose to do so; however, that Parent or Guardian cannot give additional access to the Parent’s App.
• Nursery Story Staff. To support the users of our platform, including nursery setting staff and parents, Nursery Story staff may need to view a nursery’s data, which may include data on any of its users. Nursery Story Staff will never copy or save a users data outside of its secure databases and servers.

Privacy of Information

Nursery Story does not own, sell, or in any other way misuse, any user’s personal information which is stored on our servers, including any photos, videos, or text. For more information on the protection of user data, see our Privacy Policy.