Your school data stays in Sweden
Vklass schema is hosted by Vklass on its own servers in Sweden, in the same secure environment as Vklass, the learning platform with over one million users. All computation, including the AI-based timetable generation, takes place on our servers. No data and no computation leaves our hosting environment.
Hosted by Vklass, on servers in Sweden
We host the entire solution ourselves, in secure data centers in Sweden. We set up and maintain our own servers because we want the competence and the control within the company.
Servers in Sweden
Databases, websites and computation clusters run in Swedish data centers. All data, including backups, is stored within Sweden and the EU/EEA, and no data is disclosed to third countries.
All computation with us
Timetable generation runs in our own computation cluster on Vklass servers and uses no external cloud services. Your students' and teachers' data is never sent outside our hosting environment to be processed elsewhere.
Redundant around the clock
Operations are dimensioned to handle full load on half the environment. The applications run redundantly on several servers behind load balancers and are monitored around the clock, all year round.
Personal data handled properly
Vklass AB is the data processor for the schools and school authorities that use the service. You are always the data controller and you own your data.
Data processing agreement according to SKR
We prefer that SKR's data processing agreement is used, and Vklass took part in the work when it was drawn up. Signing a data processing agreement (PUB) is part of our routine at every rollout.
Data protection in everyday work
Data protection matters are handled by a dedicated operations group with the support of legal counsel, within Visma's group-wide data protection framework with an independent data protection officer. All staff receive ongoing training in privacy and data protection.
Complete deletion
When a contract ends, the customer's data is deleted completely in accordance with the data processing agreement and GDPR, including databases, files, logs and backups. Demo environments and tests always use synthetic data and never your personal data.
Protected in several layers
Security is built on the same technical protections as the rest of Vklass. As part of Visma, Vklass is covered by the Visma Security Program, a group-wide security baseline that is measured continuously.
Encryption all the way
All communication is encrypted over TLS, and sensitive data is also encrypted at rest. Keys are managed with strict access control and rotated regularly.
The right permissions for the right person
Access is controlled by roles following the principle of least privilege, with the same roles as in Vklass. All events involving personal data are logged with full traceability.
Tested and monitored
Firewall and DDoS protection come from a Swedish provider. Around-the-clock security monitoring and regular penetration tests are carried out through the Visma Security Program, which also supports regulations such as NIS2.
Sign-in on your terms
Vklass schema uses the same sign-in platform as the other Vklass services. You choose how your users sign in, and different roles can sign in in different ways.
Federated sign-in
Users sign in through your organization's own identity provider with SAML 2. The same federated sign-in applies across all services, on the web and in the apps.
Multiple federations, split by role
One organization can use several identity providers in parallel and split sign-in by user role, for example one identity provider for staff and another for students.
Strong e-identity
Sign-in has direct support for national e-identity solutions, without you needing your own identity provider. Guardians particularly appreciate this. Username-and-password sign-in can be switched off per role.