Everything your school needs to say yes.

ATL Portfolio is a purpose-built digital portfolio platform for IB World Schools (PYP, MYP and DP). It helps students document evidence of their Approaches to Learning (ATL) skills, and supports teachers and coordinators in assessing and tracking skill development over time.

Who it is for: Students aged 5–18 enrolled in IB programmes; teachers and coordinators; school administrators; and IB programme coordinators.

Educational purpose: To support IB ATL skills development through structured reflection, evidence collection, teacher feedback and progress reporting — aligned to the IB framework.

Benefits to schools: A single, secure home for ATL evidence; reduced administrative burden through automated reporting; school-isolated data with role-based access; and accreditation-ready evidence aligned to IB and CIS frameworks.

• Student privacy first — all portfolios are private by default and never publicly visible.
• Schools own their data — ATL Portfolio acts as a processor on behalf of the school.
• No advertising — no advertising is displayed to any user.
• No selling of user data — student and staff data is never sold to third parties.
• Minimal personal data — only data necessary for educational use is collected.
• Privacy by design — role-based access and school isolation are enforced at the database layer.
• ✕No home addresses, phone numbers or national ID numbers.
• ✕No biometric data, no financial data from students or parents.
• ✕No marketing tracking cookies or advertising pixels.
• ✕AI features are assistive and are not intended to make final educational decisions without human review.

• Secure authentication — email-based sign-in with session token expiry.
• Role-based permissions — students, teachers, coordinators, admins and superusers.
• Encryption in transit — all traffic is served over HTTPS / TLS.
• Encryption at rest — data and file uploads are encrypted in cloud storage.
• Access controls — row-level security (RLS) enforced at the database layer.
• Principle of least privilege — users see only the data their role requires.
• School data isolation — every record is tagged with a school identifier; no cross-school access.
• Domain-based access — only users with a verified school email domain reach school data.

ATL Portfolio is designed to align with the UK GDPR, EU GDPR and the Swiss Federal Act on Data Protection (FADP), recognising that many international schools operate in Switzerland.

• Data minimisation — only data necessary for ATL assessment is collected.
• Purpose limitation — school educational data is used to provide the educational service and related security/support functions; optional service analytics are consent-based and do not intentionally include student portfolio content.
• Storage limitation — data is retained only for documented purposes and periods, subject to school instructions and applicable legal requirements.
• Lawful basis — the School, as controller, determines and documents the lawful basis applicable to its processing.
• Subject Access Requests — ATL Portfolio assists the School promptly with verified requests.
• Right to erasure — ATL Portfolio assists the School with verified deletion or anonymisation requests in accordance with the DPA and retention schedule.
• Data portability — schools can request export of their data in a portable format.
• Breach notification — Schools are notified without undue delay after ATL Portfolio becomes aware of a Personal Data Breach affecting School data.

ATL Portfolio is designed with safeguarding in mind. The platform provides a teacher-controlled, moderated educational environment:

• Teacher-controlled environment — authorised teachers can view student evidence within their school and manage assessment and feedback through school-defined workflows.
• Role-based access — students see only their own data; authorised teachers can access student evidence within their own school; coordinators and administrators have broader school-level access appropriate to their roles.
• No public student profiles — portfolios are private and not indexed or searchable on the internet.
• No unnecessary sharing — no direct messaging between students and external parties.
• Age-appropriate design — minimal data collection; no profiling or advertising.
• Secure authentication — school email domain verification before access is granted.
• Moderated environment — teacher feedback and assessment within a closed school context.
• Safeguarding by design — media uploads stored in private, access-controlled storage.

• Supported browsers: Current versions of Chrome, Edge, Safari and Firefox.
• Supported devices: Any device with a modern web browser — desktop, laptop, tablet, smartphone.
• Network requirements: Standard internet access; HTTPS on port 443. No special firewall rules or VPN required.
• Authentication: Email-based sign-in; school email domain used for access control. No on-premise directory integration required.
• Cookies: Essential session and authentication cookies only. See our Cookie Policy for details.
• Storage requirements: No local storage required; all data held securely in the cloud. Student evidence file uploads are stored in access-controlled cloud storage.

Use this checklist when reviewing ATL Portfolio for school approval. The page is designed to print cleanly to PDF using your browser's print function.

• Educational purpose is clearly documented and proportionate
• Data minimisation: only data needed for ATL assessment is collected
• Privacy Policy and GDPR information are publicly available
• Data retention period is stated and documented
• Data deletion process is available on request
• Security measures (encryption, access control) are explained
• School data is isolated from other schools at the database level
• User roles and access levels are clearly defined
• Sub-processors are listed and disclosed
• A Data Processing Agreement (DPA) is available on request
• Subject Access Request and erasure processes are documented
• Breach notification process and controller-assistance commitments are stated
• Contact route for compliance questions is available
• No sale of student data or advertising-based profiling