VANTAGEAccess control
Vantage separates school staff access from Vantage super administrator access. School users are scoped to the school membership and role they have been given. Super administrator accounts are not added through school-level user management.
The application is designed around database row-level security and role checks so school records are not shared between schools through normal user access.
Authentication
Vantage supports passwordless email sign-in and may support Microsoft or Google sign-in where a school or system administrator approves it. For staff single sign-on, Vantage requests basic identity information only: sign-in identity, profile, and email address.
Data residency & handling
Australian data residency. School and student records are stored and processed in Australia: the production database, authentication, and file storage are hosted by Supabase in its Australia (Sydney) region, encrypted at rest (AES-256) and in transit (TLS), and the application runs on Vercel with compute in the Sydney region. A small number of operational sub-processors — transactional email and de-identified error monitoring — handle limited data overseas; each is listed with its purpose and location in our Sub-processor list.
Data is used to run operational workflows such as SLSO support deployment, parent or staff reminders, reporting, and audit history. Vantage does not sell school data and does not build advertising profiles from school or student data.
Production secrets are managed outside the codebase, and traffic is encrypted in transit.
Audit trail
Important operational actions can be recorded, including roster publication, delivered support, overrides, and administrative changes. This helps schools understand who changed what and when.
Operational security
- Least-privilege access is used for operational support.
- Application changes are tracked through source control and deployment history.
- Authentication, email, and notification services are monitored through provider logs.
- Automated daily database backups run on the managed platform, with an additional off-platform copy and a documented, rehearsed restore runbook.
Report a concern
Security questions or suspected issues can be sent to admin@vantageschool.com.au. Please include the affected school, user, time, and a brief description of what you observed.