A private vault per school
Every school's records live in their own separate database — never pooled or mixed with another school's data.
Trust & Security
Your school's data, protected and proven
Schools trust us with information about families and children. We protect it with strong security and real privacy — and we test our own defenses every month, then publish what we find.
How we protect your school
Built to keep student information safe
Encrypted on every connection
All traffic to and from MartialCRM is encrypted in transit with modern TLS, rated A+ by independent testing.
Staff see only what they should
Role-based access for your team, and branch privacy enforced on our servers for every request — not just hidden on the screen.
Sign-ins locked down
Passwords are stored only as one-way hashes, and repeated failed sign-ins are automatically locked out.
Connected mailboxes stay private
If you link a Gmail or Outlook inbox, its access keys are encrypted at rest and used only to show your front desk's email activity.
Backed up every day
Your records are backed up daily, so a mistake or a mishap is never the end of them.
How we stay honest
We test our own security every month — and publish the result
Most software simply asks you to trust it. We would rather show you. Each month we run a full security test against a production copy of MartialCRM — the same kinds of checks a real attacker would try — covering sign-in, data isolation between schools and branches, and the latest known software vulnerabilities.
Latest result, October 2026: no critical, high or medium issues. The fixes from our previous security review were re-confirmed, and isolation between schools and between branches held up under direct testing.
No system is ever perfectly secure, and we won't pretend otherwise. What we promise is simpler and more honest: we look hard, we fix fast, and we tell you the truth.
- MonthlyA full security test, every month
- 0Critical, high or medium issues in the latest test
- A+on all three independent security grades
Independently verified
Don't just take our word for it
These are live, public security grades from independent services. Open any report to check it for yourself.
A+
SSL / TLS encryptionQualys SSL Labs
A+
HTTP security headerssecurityheaders.com
A+
Overall web securityMozilla Observatory
Delivered & protectedby Cloudflare
Your data is yours
We collect only what we need to run MartialCRM, we never sell personal information, and we never use it for advertising. Our Privacy Policy spells out exactly what we collect, the trusted providers who help us run the service, and how long we keep it. When a school leaves, we delete its data within 90 days.
If you are a student or parent with a question about your information, your school controls that data — please contact your school first, and we will help it respond.
Found a security issue?
We welcome reports from security researchers and from anyone who spots a problem. Email security@martialcrm.com, or use our contact form and choose "Something else". We will acknowledge your report and keep you updated while we investigate. Our machine-readable security contact is published at /.well-known/security.txt.
Ready to spend less time on paperwork?
Tell us about your school. We will answer your questions, show you around and help you choose the right plan.