Security, privacy and hosting
Student safety and data security matter to us as much as they do to you. This page sets out how Banqer hosts, protects and handles school data. It's written for school IT teams and business managers working through a vendor review.
At a glance
How we keep school data safe
Hosted in Australia
School and student platform data is stored on Amazon Web Services (AWS), in Australian data centres only.
Encrypted throughout
Data is encrypted in transit and at rest.
Actively monitored
Our technical team monitors our systems and responds to alerts.
Tested regularly
We run regular penetration testing and vulnerability scanning.
NZ and Australian privacy law
We comply with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988.
A team that owns security
A cross-functional team oversees our privacy and security, runs staff training and drives improvement.
Personal information we hold
We only collect what Banqer needs to run
Banqer is a financial literacy platform. The personal information we hold is limited to what teachers and students need to use it.
-
Teacher account details: name, school email address, phone number and school
-
Student account details: first and last name, year level, and email address for Banqer High
-
Parent and guardian details: name and email address, if they're invited to get updates on their child's progress
-
Classroom activity: transactions, account balances, quiz results and learning progress
We don't collect health or pastoral information, and all money in Banqer is pretend. We never sell personal information.
The detail
How we protect your data
Hosting and data residency
- Banqer is a New Zealand company serving schools mainly in New Zealand and Australia.
- School and student platform data is hosted on AWS infrastructure, only in Australian data centres.
- AWS provides strong physical and digital safeguards. It holds ISO 27001, SOC 1, 2 and 3 and other globally recognised certifications.
Data retention and deletion
- The personal information that we collect and use will not be kept longer than necessary for the purposes for which it is collected, or for the duration required for compliance with applicable law, whichever is longer. Read our retention policy.
- Schools can ask us to delete their data at any time.
- Deletion is thorough and can't be reversed. It removes all personally identifiable information from our systems.
Legal and regulatory compliance
- We comply with the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988. These laws shape how we collect, use and protect personal information.
- See the service providers (sub-processors) that help us run Banqer.
- Our Privacy Policy and Terms of Use cover the full detail.
Banqer qualified for the Safer Technologies 4 Schools (ST4S) Product Badge Program in 2026, against their 2024 framework.
Common questions
Questions schools ask us
Who owns the data?
You do. Under our Terms of Use, data you and your students add to Banqer remains your property. You give us a licence to use it only to run Banqer for you, and we handle personal information as your data processor. We never sell personal information.
Where is our data stored?
On Amazon Web Services (AWS) infrastructure, only in Australian data centres.
Can Banqer staff see our school's data?
Banqer is a small team, so the people who build Banqer are the same people who support your school. We access school data when we need to, such as to help a teacher or fix a problem. Staff accounts are protected by multi-factor authentication, and our team completes privacy and security training.
Does Banqer support multi-factor authentication (MFA)?
Teachers can opt in to MFA on the new Banqer Primary. It isn't available on our other platforms.
Does Banqer support single sign-on (SSO)?
Teachers can sign in with Google or Microsoft on the new Banqer Primary. SSO isn't available on our other platforms.
How do we get our data deleted?
Send us a written request and we'll start the process. Deletion can't be reversed and removes all personally identifiable information from our systems. Our Privacy Policy explains how long we keep personal information.
For your vendor review
Need more detail?
We're happy to answer your school's due diligence questions, and can share more with your IT team.
-
Completed security questionnaires. Send us yours and we'll fill them in
-
Our hosting, privacy and security summary as a PDF, for your vendor file
To request any of these, ask your Banqer contact or get in touch through our contact page.
