Privacy and security
The sector’s most sensitive data – treated accordingly
Decisions on individually adapted education and school environment cases are special categories of personal data. This is how Strigoo Synargus is built to protect them – and what the municipality needs for its risk assessment.
Sign-in with the municipality’s identity
Staff sign in with the municipality’s own Microsoft account (Microsoft Entra ID). No separate passwords to lose. Roles – school owner, head teacher, staff – are managed per school, and users only see their own school or their own hierarchy.
Encryption of sensitive data
Free text and sensitive fields in the decision register and the school environment module are encrypted. Decision data is stored separately per school owner, so deletion can be completed in full for one municipality.
Full audit log
All reading and writing of decisions and school environment cases is logged. The municipality can document who saw what, and when – a requirement for internal control.
Anonymised view
The decision register can be shown with ** *** instead of names – for meetings, screen sharing and the school owner’s aggregated overview, which never shows individual pupils.
Data processing agreement and risk assessment
We sign a data processing agreement with every municipality and provide the documentation you need for your own risk assessment before start-up and when things change.
Operations, backup and logging
All personal data is stored within the EU/EEA. Daily backups with a long history, and errors and incidents are logged centrally. Sub-processors are listed in the data processing agreement.
The regulations built in
Calculations and workflows are coded according to Norwegian education regulations and maintained in one place – when the rules change, every municipality is updated at the same time.
- The Education Act (2023)
- § 11-6 individually adapted education, § 3-6 specialised language instruction, ch. 4 school transport, ch. 12 school environment
- Pupil-to-teacher ratio
- Pupils per teacher for years 1–4, 5–7 and 8–10 (§ 14-3 and Education Regulations § 12-19)
- SFS 2213
- The working-time agreement – annual hours, teaching load, life-phase measures
- GSI / UDIR
- The Primary and Lower Secondary School Information System – fields filled in from the plan
- GDPR
- Special categories, data processing agreement, deletion
- The Archives Act
- Decisions are retained in line with archiving requirements
Privacy statement for strigoo.no
When you book a demo we store your name, municipality/school, organisation number, role, e-mail and, if provided, phone number in order to contact you. The information is not used for anything else and is deleted when the conversation has ended, unless you become a customer. The website does not use third-party tracking tools.
Requests are stored in our customer follow-up tool (Notion), and we are notified by e-mail (Resend). To stop automated spam the form uses Cloudflare Turnstile, which checks the browser without using cookies for tracking or advertising.
The data controller is Strigoo AS, Sarpsborg, Norway. Questions about privacy: firmapost@strigoo.no.
Last updated September 2026.