Data Processing

This page describes how data flows through Junipa and who processes it.

Data Flow

School Information System (Compass, TASS, etc.)
       |
       | Wonde API or LISS (read-only, encrypted)
       v
+------------------+
|     JUNIPA       |  GCP australia-southeast1
|                  |
| Firestore (data) |
| Cloud Storage    |
| Firebase Auth    |
+------------------+
       |
       | Web interface (HTTPS, TLS 1.3)
       v
School Staff (teachers, administrators)
       |
       | Downloaded reports (PDF, Excel)
       v
Department of Education
  (manual submission by school)

Data Sources

Source	Method	Direction
School staff	Manual entry via web interface	Into Junipa
Student Information System	Wonde API or LISS integration	Into Junipa (read-only)
CSV import	Manual file upload	Into Junipa

Junipa does not write data back to the school's SIS. The integration is read-only.

Sub-Processors

Provider	Purpose	Data location	Certifications
Google Cloud Platform	Firestore, Cloud Storage, Cloud Functions, Firebase Auth	australia-southeast1 (Sydney)	SOC 2, ISO 27001
Cloudflare	WAF, DNS, CDN	Global edge (no data stored)	SOC 2, ISO 27001
Wonde (if configured)	SIS data synchronisation	Australia	ISO 27001

What Junipa Receives from SIS

• Student roster (name, DOB, year level, enrolment)
• Staff list (name, email, role)
• Class structures and timetables
• Attendance flags
• Medical notes (if configured by school)

What Junipa Does NOT Receive

• Academic grades or assessment results
• Behaviour records or discipline data
• Financial or fee information
• Parent login credentials
• Student photographs (unless explicitly configured)

Multi-Campus Data Flow

For organisations with multiple schools:

1. Each school operates in its own isolated GCP project
2. The organisation portal connects to schools via secure handshake (invite code flow)
3. Aggregated summaries sync from schools to the org portal
4. The org portal cannot modify school-level data
5. Schools control what data is shared with the org portal

Data Processing Agreement

Schools can request a Data Processing Agreement (DPA) that formalises the data processing relationship. Contact info@junipa.com.au to request a copy.