Trust centre
Every public policy and record Karo publishes, read only. Each document shows its reference, version and effective date. To request a copy, contact info@karoschool.net.
Last document change: 8 November 2026
Agreements and policies
| Reference | Title | Version | Effective date | Read |
|---|---|---|---|---|
| KRO/GOV/CTR/2026/01 | Agreement | 1.0 | 8 November 2026 | Read |
| KRO/GOV/POL/2026/02 | Privacy Policy | 1.0 | 8 November 2026 | Read |
| KRO/GOV/STD/2026/04 | Cookie Notice | 1.0 | 8 November 2026 | Read |
| KRO/GOV/POL/2026/03 | Acceptable Use Policy | 1.0 | 8 November 2026 | Read |
| KRO/GOV/STD/2026/01 | Sub-processors | 1.0 | 8 November 2026 | Read |
Service
| Reference | Title | Version | Effective date | Read |
|---|---|---|---|---|
| KRO/GOV/STD/2026/02 | Service Level Agreement | 1.0 | 8 November 2026 | Read |
How Karo keeps school data safe
- Every connection is encrypted in transit, and databases, backups and files are encrypted at rest.
- The database is backed up every day, and the restore has been tested.
- School data is held in Amazon Web Services US West (Oregon), United States; WhatsApp messages go through Africa's Talking in Nairobi.
- Access follows each person's rights, and sensitive actions ask the person to confirm it is them again.
- Karo sends no SMS: codes and notices go by WhatsApp or by email.
- Questions or a request for a copy: info@karoschool.net.
Held internally, available to a school on request under NDA: Data Protection Impact Assessment; Platform Security Assessment; Incident Response Drill Record; Business Continuity and Disaster Recovery; Record of Processing Activities; Data Protection Policy.