Security is our main priority
We are very proud of the trust placed in us by so many schools, settings, childminders, and families to take care of the data added to Tapestry. We take our responsibility to look after it very seriously.
If you’re thinking about taking out a subscription to Tapestry or if your child’s teachers already use it, please feel free to click on the link below to download and look through the contract we ask Tapestry customers to agree to. In it, you can find out what you can expect from us, what we expect from you, and how we make sure data is kept securely.
Tapestry Contract – released 22nd December 2025
You can find the latest changes to the contract at the end of it, and we also have a PDF that highlights all the changes from the previous version of our contract.
You can find a list of our sub-processors on our Tapestry Sub-Processors page.
Below you can find answers to some of the questions we’re frequently asked about security.
FAQs
Can you fill out this security questionnaire for me?
To keep our price down, we do not enter into bespoke contracts or fill out security checklists. However, we hope that our contract, including its annexes, include all the answers you need and cover all the events that you are concerned about and that you can use them to fill out whatever paperwork you require for your own systems.
If you have questions about our service that aren’t covered then do get in touch.
Do you offer a service level agreement?
To keep our price down, we do not. However, we take fulfilling our obligations to you very seriously and will do our utmost to ensure our service is there whenever you need it.
Can I change the minimum password policy?
Yes. A manager on your Tapestry account can set the stipulations for a password including it’s minimum length and whether any special characters are needed.
Do you keep a back up?
Yes, we back data up in a completely separate physical location. These should be, at most, 24 hours old and we should have 90 days of backups.
Who can access the data?
Only you, and those you authorise, will have access to your Tapestry accounts. You can restrict the people you authorise to only be able to view data about some children.
Can I set what people on the account have access to do/see?
Yes, managers can control what individuals are able to do and see in the ‘user permissions’ section.
Here are some comments we’ve had about Tapestry’s approach to security
"I just wanted to say how impressed I am with your GDPR Contract, I've had a few parents waiting to hear about the final draft after keeping them up to speed regarding how it's coming along, I feel completely confident in sharing any of the information written within it to assure them they should have no concerns regarding security etc."
"Thank you again for being so stringent about both Data Protection and Safeguarding."
