Trust & security
Security at Education Host
How Education Host approaches security: access control, Microsoft Entra sign-in, role separation, isolated teaching environments, UK data-centre hosting and Cyber Essentials certification.
Education Host designs education platforms with access control, separation of roles, auditability and practical support for school and university environments. Platforms run on accredited UK data-centre infrastructure, Education Host is Cyber Essentials certified, and identity is handled through institutional sign-in — Microsoft Entra where the platform and deployment support it.
How is access controlled?
Access is role-based across the platforms: students, lecturers, administrators and IT each see only the tools appropriate to their role. Student Web Host Manager and Cover Manager support Microsoft Entra (Azure AD) sign-in, so users authenticate with existing institutional credentials rather than separate passwords; Cloud Pulse can integrate with institutional identity providers where an institution configures SSO.
Delegation is deliberate: lecturers manage their own students and modules without infrastructure access, while IT retains control of servers and policy.
- Role-based access on every platform
- Microsoft Entra sign-in on Student Web Host Manager and Cover Manager
- Cloud Pulse SSO where an institution configures it
- Conditional access where institutionally configured
- Admin-controlled users, roles and settings
How are student environments contained?
Student hosting accounts are individually provisioned and centrally governed, with suspension, restriction and archival controls aligned to the academic calendar. Cloud Pulse teaching labs run as isolated environments; security-focused labs use private lab networks with internet access off by default and remote access through a system-managed gateway, within acceptable-use boundaries agreed with the institution.
Where does the infrastructure run?
Managed hosting is delivered from the 6DG Birmingham Central data centre — a purpose-built, Tier III-aligned UK facility operated by Six Degrees. The facility holds certifications including ISO 27001, ISO 22301, PCI DSS and SOC 2 (facility-level certifications, held by the operator). Education Host itself is Cyber Essentials certified.
Monitoring, backups and patching form part of the managed service, with maintenance planned around teaching and assessment periods.
What can our IT and security teams review?
Security reviews are supported during scoping: we can walk through authentication flows, role models, environment isolation, backup arrangements and the infrastructure behind a specific deployment. Deployment-specific details are confirmed during onboarding rather than promised generically.
- Authentication and SSO configuration for your deployment
- Role and delegation model per platform
- Lab isolation and acceptable-use boundaries (Cloud Pulse)
- Backup, monitoring and maintenance arrangements
- Facility and company certification evidence
Security at Education Host — frequently asked questions
Direct answers for IT, security, procurement and teaching teams.
- Is Education Host Cyber Essentials certified?
- Yes. Education Host holds Cyber Essentials certification. Facility-level certifications (including ISO 27001) are held by the 6DG Birmingham Central data centre operator, and we keep the two clearly separate.
- Can platforms integrate with Microsoft Entra SSO?
- Student Web Host Manager and Cover Manager support Microsoft Entra (Azure AD) sign-in. Cloud Pulse can integrate with institutional identity providers, including Microsoft Entra ID, where an institution configures SSO — confirmed during onboarding.
- How are cyber security teaching labs kept safe?
- Cloud Pulse security labs run on isolated private lab networks with internet access off by default, reached through a system-managed gateway, and operate within acceptable-use boundaries agreed with each institution.
- Where is data hosted?
- Managed hosting runs on UK data-centre infrastructure (6DG Birmingham Central). Education Host operates in line with UK GDPR — see the data protection page for detail.
- Can we run a security review before buying?
- Yes. Security and IT reviews are a normal part of scoping — book a consultation and we will walk through the specifics of your intended deployment with your team.
Every deployment starts with a conversation
Tell us about your institution, modules and requirements — we will answer the technical and commercial questions honestly, including where something is not the right fit.