In September, the BBC reported on a cyber-attack affecting a large nursery chain in the UK. Criminals threatened to publish personal information of children, families, and staff online unless a ransom was paid. While the authorities are investigating, the incident has highlighted how vital cyber security and data protection policies are, especially in the Early Years sector.
While eyworks were not involved in this incident, we know how concerning this news may feel for families and nurseries. That’s why we want to be transparent about the steps we take to protect your information.
How eyworks keeps your data safe
We have built multiple layers of protection into our software, and we review them regularly to stay ahead of emerging threats. Here are the measures in place:
-
Cyber Essentials certified
eyworks meets recognised UK standards for cyber security, verified by an independent certification process.
-
Secure UK-based hosting
All information is stored on Amazon Web Services (AWS) in the London region, so your data stays securely within the UK.
-
Encryption
Data is encrypted both when stored and when transferred. This means information cannot be read if intercepted.
-
Regular security testing
Independent penetration tests and audits are carried out to check the strength of our systems. -
Continuous monitoring
Our infrastructure is monitored 24/7 with systems designed to quickly detect and respond to potential risks.
These measures work together to reduce the risk of a cyber attack and give nurseries and families peace of mind.
Best practices for nurseries and parents
While we keep our systems secure as a data processor, there are also steps that your nursery, as the data controller, can take to add extra protection. We recommend:
-
Enable multi-factor authentication (MFA)
Multi-factor authentication adds an extra layer of protection when logging into eyworks. Even if someone gets hold of your password, they still won’t be able to access your account without the additional verification step, such as a code sent to your phone or email.
-
Use strong, unique passwords
Choose passwords that are long and difficult to guess, and avoid using personal details like names or birthdays. It’s also important to use a different password for every account you have, and to never share your password with others. Reusing passwords can mean that if one account is compromised, others could be too.
-
Be cautious with emails
Phishing emails are one of the most common ways cybercriminals try to gain access to sensitive information. If you’re ever unsure about an email, don’t click any links or open attachments. Instead, check the sender’s address carefully or contact the company directly using official details, not the ones in the email.
-
Keep devices up to date
Regularly updating your phone, tablet, or computer ensures you have the latest security protections. Software updates often include important security improvements. Turning on automatic updates is an easy way to make sure your devices are always protected without having to remember to do it manually.
-
Log out on shared devices
If you access eyworks on a shared computer or tablet, make sure to log out completely when you’ve finished. Staying signed in can allow others to access sensitive nursery or staff data by mistake. Logging out properly only takes a moment, but it’s a simple habit that helps keep your information secure.
These steps are simple but effective ways to strengthen your security.
Our promise
As we are seeing with recent cyber attacks on large companies, no system can ever be 100% risk-free, but at eyworks we continually review and strengthen our approach to security so nurseries and families can rely on us with confidence. This includes:
- Keeping pace with new and emerging cyber threats.
- Reviewing and updating our policies and processes regularly.
- Being transparent about the steps we take to protect sensitive information.
- Putting the safety of children, families and nursery teams at the heart of every decision.
By combining trusted technology with clear communication, we make sure data protection remains central to our nursery management software. If you have any questions about our approach to security, please contact us at support@eyworks.co.uk.
Supporting your whole nursery community
We know nurseries need tools that not only help manage daily tasks but also protect sensitive information. eyworks offers a full suite of nursery management software, built with the same commitment to data protection and security, designed to support every part of your setting:
- eylog for child development tracking
- eymanage for finance and invoicing
- eyparent for secure parent communication
Learn more about the full eyworks suite of nursery management software or book a free demo today.