Protect, expand, extend — RoseShield for schools & organizations

How it deploys

Three ways to protect

Each works independently. Most organizations begin with the network, because Router can sit alongside the systems they already use.

Protect

Your network

RoseShield Router

An on-premise appliance across the network you already operate. Every device connected to it is protected — school laptops, tablets, and a student’s own phone for as long as it is on your network.

Router can run alongside your existing stack, with protected content processed locally.

Expand

A space of your own

RoseShield Campus

A fully protected learning platform and social space. Courses, groups, messaging and events in one place, with detection built in rather than bolted on.

The safeguarding view sits beside the learning view, so your team is looking at one screen rather than three.

Extend

Beyond your walls

Consumer App · bulk licenses

Protection follows students onto the phones they carry home, on their own data, outside your network.

Bought in bulk by the organization and passed to families. On the family’s phone, under the parent’s control.

Finding what matters

Finding the interaction that needs attention.

Your safeguarding team already knows how to respond to a disclosure. RoseShield is designed to surface the interactions they would otherwise never see, while there is still time to act.

What a flag actually looks like

The engine reads it on the device
A pattern builds in a Year 9 group chat. No single message would have triggered anything.
It scores it, and says why
Risk 91 of 100. Grooming indicators, secrecy pressure, escalating over time. The reasoning is attached, not just the verdict.
It reaches your officer, top of the queue
Ordered by risk, not by arrival. With the evidence needed to make a judgment, and nothing beyond it.
Your school decides
Who is told, whether it's reported, and what it means under local law. Nothing is auto-reported. Those decisions remain with your school.
The audit trail records it
Who saw what, when, and what they did. Exportable, tamper-evident, and built for the inspection you'll eventually have.

Coverage

Where the coverage ends

Every device on your network is protected. Not only school-managed laptops and tablets — a student’s own phone is covered too, for as long as it is connected to your network. That is the environment you control.

Step off the network and the Router no longer sees it. A student on their own mobile data is outside its reach. Bulk licenses of the Consumer App are available — on the family’s phone, under the parent’s control.

Records

Three tiers, so your team can tell events apart

RoseShield distinguishes three kinds of event and presents them differently, so your team can apply your policy to each. What is recorded, retained and escalated is set by you.

Stopped and reconsideredLogged, not filed

A student presses send on an insult. RoseShield stops it, tells them why, and offers another way to put it. Whether that event is visible to your team, recorded, or neither is set by your policy.

A pattern formingTrend only

The same thing keeps happening, or it is getting worse. Your safeguarding lead is shown that a trend exists, without the messages behind it. What you do with that is a matter for your policy.

A safeguarding eventEscalated and logged

Grooming, sextortion, exploitation, credible self-harm. This goes to your named officer with the evidence attached, is logged, and is kept under your retention policy.

All three thresholds are yours to set, including what escalates, what stays in the queue, what is recorded and what is retained. RoseShield does not decide what belongs on a child’s file.

For your DPO

Data protection

Controller and processor

You are the controller. We are the processor. The operator agreement comes as a schedule to the contract — not a negotiation you have to open.

Data protection impact

DPIA support pack, sub-processor list, residency options and a retention schedule you control.

Verify it yourself

Bring your own security team. Run traffic analysis against a pilot deployment and confirm what leaves the device.

United States

FERPA, COPPA, CIPA and E-Rate considerations. We will tell you plainly which certifications we hold, which are in progress, and which we do not have.

FERPACOPPACIPA

UK & EU

KCSIE alignment, UK GDPR and the Digital Services Act. Designed around the designated safeguarding lead as decision-maker of record.

KCSIEUK GDPREU DSA

How you get it

What you get: RoseShield Router across two or three sites, with your safeguarding lead deciding on every concern raised. What it costs: per user, per month — priced on the pilot, not the whole estate. What happens next: a scoping call, success criteria and stop conditions agreed before it starts, and a written report at the end.

Request a pilot

Three ways to protect the young people in your care.