CounselPRO uses two independent layers of security to protect counselling data:

• The first layer of protection is the access controls placed on database folder. This access control enforced by the school’s IT team ensuring that only the specified users have access to the database.
• The second layer is provided by industry best practice encryption (AES-128-CBC), which is applied to all counselling data and can only be decrypted by a suitably authorized user (see “Who has access to the data?“ section)

Please note, attachments (e.g. PDF’s, images) that are uploaded to the student folder are not encrypted. Access to them is restricted to those users who have access to the database folder.