Security and data ownership

Student and staff records need clear ownership and controlled access. This overview explains Consularly’s access-control design and what to confirm when evaluating your workspace.

Organization ownership and staff permissions

Consularly’s database uses organization ownership and row-level security to separate tenant records. Authenticated application operations carry the caller’s session, and staff roles and permissions determine the actions available inside an organization.

During a demo, ask to see both an allowed action and a denied action for a counsellor, teacher and finance role. Discuss branch responsibilities and offboarding before importing records.

Connected services and operational access

Email, messaging, calendars, AI and other external services depend on configuration, connected accounts, permissions and provider requirements. A feature in the catalog does not mean every external account is already connected.

Background processing and platform operations have separate access paths. Ask the team to explain support access, audit records and the providers relevant to your intended workflow.

Prepare a controlled migration

Start evaluation with fictional records. Agree an authorized migration scope, record ownership, import checks, export requirements and staff training before supplying real data. Do not send student documents through the public demo form.

Use our spreadsheet migration guide. Request the current operational backup and recovery arrangements, retention terms and incident contact during procurement. This page is not an independent certification or a guarantee against security incidents.

Report a concern or request privacy information

Email info@consularly.com with the affected page and a description. Share the minimum necessary information; request a suitable channel before sending sensitive records or credentials.

See the privacy policy, data deletion information and terms for the public policies. Confirm requirements specific to your consultancy before onboarding.