MPOWER Classroom – Data Hosting, Security & Privacy Overview

The MPOWER Classroom browser-based learning platform is built and managed in-house by One Vision Productions. The platform operates in NSW and is available to schools and organisations across Australia.

All Australian customer data, including school/educator data, is hosted within Amazon Web Services (AWS) Australian data centres (Sydney region). Data is not transferred offshore for core platform hosting. Our infrastructure is designed to meet Australian privacy and security standards, including obligations under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

To support day-to-day operations, MPOWER Classroom utilises selected third-party Software as a Service (SaaS) applications. These tools are primarily used by internal back-office teams including Finance and Administration to meet legal, financial and service delivery obligations.

Third-party providers do not access platform data unless required for the specific service function (e.g. user correspondence). All vendors are assessed prior to engagement and reviewed regularly to ensure appropriate security controls are in place, including recognised compliance standards such as SOC 2 or equivalent. As part of our Privacy and Compliance Program, we proactively monitor legislative changes to ensure ongoing compliance with Australian data protection requirements.

 

STUDENT DATA IS NOT COLLECTED

MPOWER Classroom collects only the minimum organisation information required for platform functionality and user authentication.

School or Teacher data is stored within the MPOWER Classroom platform and is not sold, rented, or shared for marketing purposes. Data is only used to deliver learning services and support educational outcomes.

 

Data Categories

---

Teacher / Educator / Admin

Personal Data Stored

• First Name

• Last Name

• Email Address

• Contact Number (where required)

Purpose

• To create a secure educator account

• To assign modules and monitor student progress

---

 

Primary School or Organisation Contacts

Personal Data Stored

• First Name

• Last Name

• Email Address

• Contact Number

Purpose

• Billing and invoicing

• Contract management

• Platform setup and account maintenance

 

Third-Party Systems

Data is only populated into support systems when contact is initiated by the user (e.g. submitting a support request or calling support).

Finance

Third Party	Personal Data Stored/Processed	Purpose	Data Location
Xero	Primary Account Contacts	Accounting, invoicing, financial record keeping and statutory reporting.	Australia (primary region for Australian organisations) with limited processing in other regions under Xero’s global infrastructure framework
Stripe	Primary Account Contacts (and payer details where applicable)	Secure online payment processing for subscription fees, invoices and other platform payments. Data only processed when this payment method is used.	Primarily United States (Stripe infrastructure) with global processing network

 

Marketing & Communications

ActiveCampaign	Teacher / Primary Contact	CRM and email marketing communications relating to product updates, features and relevant learning materials. Users may opt out in accordance with the Spam Act 2003 (Cth).	United States (AWS infrastructure)
Google Workspace (Gmail)	Teacher / Primary Contact	Direct email correspondence, account communications, service updates and general business communications.	Australia, United States and other global Google data centres (subject to Google infrastructure routing)

 

Platform Hosting & Infrastructure

Third Party	Personal Data Stored/Processed	Purpose	Data Location
Amazon Web Services (AWS)	Student / LearnerTeacher / AdminPrimary Contact	MPOWER Classroom platform infrastructure and secure hosting	Australia (Sydney Region)

 

 

Security Commitment

MPOWER Classroom implements:

• Encrypted data transmission (HTTPS/TLS)

• Secure role-based access controls

• Regular security review of infrastructure and vendors

• Ongoing compliance monitoring aligned to Australian regulatory requirements