NCA Essential Cybersecurity Controls (ECC)
How Spark-Ed supports Saudi cybersecurity requirements.
What this means for your school
The National Cybersecurity Authority (NCA) publishes the Essential Cybersecurity Controls (ECC) for organisations in the Kingdom. Spark-Ed is built in alignment with these controls, and Saudi schools are hosted in KSA.
Hosted in KSA
Saudi school data is hosted in the Kingdom.
Protected data
Encryption in transit and role-based access to data.
Cloud only, on AWS
Spark-Ed runs only in the cloud, so there is nothing to install or maintain at your school.
Daily backups
Your data is backed up every day so it can be restored if something goes wrong.
Continuous monitoring
The platform is monitored around the clock for availability and unusual activity.
Secure by design
Security is part of how the platform is built and run.
Where your data lives
Each school is assigned a hosting region on AWS. All regions use the same security practices.
Saudi Arabia
Schools in the Kingdom are hosted on AWS in KSA.
United Arab Emirates
UAE schools are hosted on AWS in the UAE.
USA, Canada and Mexico
Hosted on AWS in California.
India and other regions
Hosted on AWS in Singapore.
Questions about security or compliance?
Talk to our team. We can share our data processing agreement and answer your IT and legal questions.