Customer trust is important to us, and we're dedicated to providing a safe and transparent experience for everyone.
We collect only the minimal amount of data required to use our products and adhere to the principle of least privilege.
We prioritise the security and confidentiality of customer data.
We handle it with the utmost care and in compliance with all relevant regulations.
Data encryption
Sensitive data is encrypted both in transit (TLS 1.2) and at rest (AES-256). We do not transmit any data via physical media.
Access control
Strict access controls, based on the principle of least privilege, ensure that only authorised personnel can access sensitive data and systems.
User authentication
Multi-factor authentication (MFA) enhances user verification and prevents unauthorised access.
Regular security audits
Regular security audits and vulnerability assessments identify and address potential risks.
Data minimisation
We collect only the essential data needed to deliver our services.
Incident response plan
A detailed plan ensures a swift response to any security breaches.
Employee training
Ongoing training helps our staff recognise security threats and implement data protection best practices.
Third-party risk management
We assess and manage risks associated with third-party vendors to ensure they meet our security standards.
Data retention and disposal
Strict policies govern data retention and secure disposal.
Everway’s commitment to global privacy laws and security standards provides you with the tools to meet your compliance requirements. Our security practices align with all applicable laws and regulations.
We implement an Information Security Management System certified to the requirements of ISO 27001:2022, audited annually by the British Standards Institute (BSI). Check controls in our Statement of applicability
Compliant with data protection and data subject rights for EU residents.
Age Appropriate Design is a code of practice for online services.
Our data packs provide full transparency with details on sub-processors, retention times, data flow, and product information.
You’ll get clear insights into the services our products provide, how data moves through the product, and key product details, ensuring compliance, security, and a complete understanding of your data handling.
R&W for Education
R&W (Windows), R&W (Mac), R&W (IOS), R&W (Google Chrome), R&W (Android)
OrbitNote
OrbitNote Classic, OrbitNote Modern
Everyway engages third-party sub processors to support the operation of our suite of products. Before working with them, we require they maintain acceptable security practices.
View the latest version of our list of sub processors, where you'll find information about how they process personal data.
We build responsible, trustworthy AI as part of our AI research and development.
Users trust our tools to create inclusive, supportive spaces and our priority is user safety and data protection. Our focus remains on creating a safe space for everyone to use our tools without worrying about their data.
This section includes key documentation commonly requested during procurement and vendor onboarding processes.
All documents are kept up-to-date to support a smooth and transparent partnership experience.
Terms of Use: A statement confirming that Everway is the sole provider of Everway products and services, to support procurement processes that require sole-source justification.
View / Download
Global Data Protection Addendum (DPA): A statement confirming Everway's global data protection practices. View / Download
How secure is Everway?
We’re constantly working to keep your data safe. Everway is serious about student and educator data protection, privacy, and system security controls. Our systems undergo regular internal and independent IT security testing and assessments, to ensure only the right people have access.
How does Everway protect my privacy?
Personal information that we collect and process in connection with our recruitment activities, is covered under our Employees, Contractors, Applicants Privacy Notice. This Privacy Notice for Everway, describes how and why we might access, collect, store, use, and/or share your personal information when you use our services, including when you access our website and engage with us in other ways.
What data does Everway collect?
Everway gathers essential details like your username, email, and preferences (contact, language) to provide you with our services. Your data is protected by robust security measures, ensuring your privacy. For complete details, please refer to our Privacy Policy.
How does the rebrand affect my existing contracts and data protection?
Our rebranding to Everway does not impact your existing legal and technical agreements with us. The underlying legal structures, including data controllers, remain the same. Your data will continue to be handled and protected according to all applicable data protection laws and regulations. While we may update our sub-processors from time to time, any changes will be communicated to you.
Importantly, the rebrand does not change our commitment: we will not use any licensed applications or customer data for training purposes. Your current contracts remain valid, and you generally do not need to take any immediate action. We will contact you directly if any contract amendments are necessary. If you have any further questions, please contact your usual account representative or our customer support team.
What is uptime and availability like?
Everway provides transparency into real-time and historical platform status:
Formerly Texthelp Product status https://status.texthelp.com/
If you have any questions, please connect with your Everway representative.
Otherwise email dataprotection@everway.com
