Data protection and hosting
ONYSS is hosted in the EU on Google Cloud Platform with encryption in transit and at rest. Data-processing, retention, subprocessor and contractual information is available during due diligence.
Trust, access and accountability are designed into the workflow.
ONYSS holds operational information relating to real learners and real support. We apply role-appropriate access, clear service records and human oversight so responsibility remains visible throughout the pathway.
Role-appropriate access
Learners, support workers, assessors, service teams, managers and finance users access the information and actions relevant to their roles. Permissions and organisational responsibilities are agreed during implementation.
Accountable support records
Referrals, consent, assessments, plans, appointments, session records, approvals, attendance, reviews, hours and costs remain connected. Authorised users can understand what happened, when it happened and what action remains outstanding.
Responsible use of AI
Ona supports defined in-platform tasks. It does not diagnose, determine eligibility, authorise funding, make safeguarding decisions or replace qualified professional judgement. Organisations remain responsible for their decisions and for reviewing information before acting on it.
Procurement and due diligence
Further information on data processing, security controls, backups, business continuity, incident management, accessibility, service support and contractual terms is available for organisations undertaking procurement or information-governance review.