HallAxis Trust Centre

School-facing information for Data Protection Officers, Exams Officers, IT teams and procurement colleagues reviewing HallAxis.

Reviewed 9 October 2026 · This page summarises current service arrangements. School DPA v2.1 is published and the onboarding journey records version-specific school acceptance. Operational backup, recovery and deletion assurance checks remain ongoing. Detailed internal security evidence and administrative records are not exposed publicly.

Data protection at a glance

School due-diligence documents

The following public information forms the current HallAxis school assurance set.

Supplier & data-location register

Principal suppliers relevant to delivery of HallAxis are shown below. Supplier processing is not represented as UK-only where that would be inaccurate.

Security & technical measures

HallAxis applies layered technical and organisational controls appropriate to its examination-resource and workforce-planning service.

Information minimisation & technical access

HallAxis has been developed and tested using staff first names only for workforce planning. It uses exam timetable, room, aggregate candidate-volume and staffing-demand information. Reader, Scribe and other Access Arrangement support is represented as staffing requirements against an exam or room, without needing to identify the student receiving support. Schools should exclude unnecessary student-identifying information from imports.

Authorised school users have role-based access. HallAxis's founder and technical administrator also retains privileged underlying-platform access for maintenance, security and technical support, potentially outside the school-user interface. Appropriate confidentiality and support safeguards should be agreed before introducing live school staff information.

Retention, offboarding & deletion

At the end of the service, a school may request the return or deletion of its operational data by emailing support@hallaxis.co.uk, subject to applicable law. Suspension does not start deletion. Following confirmed exit or non-subscription, the 30-day deletion-eligibility period triggers administrative review, not automatic deletion. Organisation removal does not by itself establish that all login identities, audit records or supplier recovery copies have been removed. These categories require separate handling.

IONOS support states that backup copies of deleted Mail Basic emails are retained for 7 days. IONOS may separately retain its own customer account records for legal and business purposes; this is not a HallAxis retention period for school exam data. Other suppliers have their own applicable retention and recovery arrangements. Operational evidence of retention reviews is stored internally for audit. Detailed internal administrative controls and school-specific evidence are not public.

International processing

The primary connected HallAxis Supabase database is hosted in Frankfurt, Germany (EU). Other authorised suppliers may process limited information internationally. HallAxis maintains supplier/transfer evidence and applicable contractual safeguards and reviews material supplier or location changes.

Need a due-diligence pack?

Schools and Data Protection Officers can request supporting supplier/data-protection information from support@hallaxis.co.uk.