FAQ

The whole system, one price:

• Incident reporting, cases, student health team meetings and accommodations
• Automatic sync with your student information system and Microsoft 365 integration
• Support, hosting and continuous updates
• Migration help from your current system
• Live online training for your superusers, multiple sessions as needed

The only add-ons are BankID through our connection and an on-site training day. BankID through your own bank agreement is included.

Normally one day. We spin up your instance, and our built-in setup wizard then walks you through the rest step by step: ready-made scripts connect Skolshield to your Microsoft 365 environment and create the SharePoint site — everything can also be done manually by following the wizard's instructions. Finally you configure the sync against your student information system, and staff, students and classes are in place automatically.

From established incident management systems, yes — and the help is included in the price. Our ready-made import tools bring over incidents, cases and meeting notes with history intact. Data in Excel or paper binders follows no standard format and cannot be imported automatically — most schools instead start fresh in Skolshield and keep the old material as an archive.

Within the EU, with the European provider Hetzner — servers in Finland and encrypted backups in Germany. All data is encrypted in transit and at rest, and never leaves the EU/EEA in our operations. The authority always owns its data — you can export or delete it whenever you want.

Uploaded files and documents are additionally stored in the authority's own SharePoint — they stay in your Microsoft 365 environment.

Your student register syncs every night via SS12000, the Swedish standard used by IST, Vklass, Edlevo, Adela and SchoolSoft, or via SchoolSoft's legacy API for schools that have not moved over yet. If you use another system we can usually solve it with a one-off import — ask us.

No. Skolshield is fully web-based and works on desktop, tablet and mobile. Staff sign in with their existing Microsoft 365 accounts; Google Workspace is planned. PIN code, one-time codes, Microsoft Authenticator with number matching and passkeys are included as extra steps and set per role. BankID can be enabled as a further level, either through the responsible authority's own bank agreement (fees are then paid directly to the bank) or as a Skolshield-managed add-on for SEK 5,000 activation and SEK 25,000 per year, fixed price at normal usage; for municipalities the cap is then lowered to SEK 148,000/year so the direct procurement still holds.

No, and that is deliberate. Every report in Skolshield is tied to a signed-in, verified person, including the quick report that can be filed from a locked screen (it is then flagged for the case handler). Some systems on the market receive reports through an open web link with no sign-in; that gives a log you cannot trust and an inbox the licensed users have to sort.

Sign-in uses the school's Microsoft 365 account, with or without a passkey. Per role you can then require an extra step once the session has locked: PIN, one-time code, or the Microsoft step with an Authenticator push or a passkey (requires Entra ID P1, included in Microsoft 365 A3/A5), and BankID at assurance level 3 on top. Everything except BankID is included in the price. Google Workspace sign-in is planned.

Support is built in. Students with confidentiality markings or protected registration are shown under an alias to everyone except specifically authorised staff, personal identity numbers are masked even for authorised users, and unauthorised staff cannot even see that a student is protected. The protection follows automatically from the student information system.

The responsible authority is always the data controller and Skolshield is your data processor; we sign a data processing agreement (DPA) with every authority. All data stays in the EU, every access to student data is logged, and the system has built-in support for breach reporting to the Swedish privacy authority (IMY).

Read our full GDPR walkthrough, article by article

The whole authority runs one installation, with every school unit in the same system. Each unit works separately with its own students and cases, while central student health sees aggregated overviews across the municipality. Each unit can have its own student-registry connection, and students who change schools within the municipality are moved automatically at the next sync.

No. Permissions follow the school unit: the principal, health team and teachers see their own school's students. Central student health sees aggregated statistics for the whole municipality, and individual cases reach the central level only when the school escalates them. All access to student records is logged and reviewable in the system's access-log review.

A built-in review view where the principal and data protection officer see who opened which student records. It flags access outside any case, with no teaching relationship and no granted permission, and the material can be exported for a formal log review. The same practice the healthcare regions use for journal systems, built straight into Skolshield.

Not beyond the contract. The list price may rise for new customers, but existing customers follow their contract: standard indexation and no other increases during the contract period. For municipalities the cap is absolute, so a four-year contract always stays under the SEK 700,000 direct-procurement threshold, even after indexation.

Yes — the demo environment is open to everyone. Click around freely among fictional students and see exactly how incidents, student health work and accommodations work day to day, with no real student data involved. The demo runs without MFA, for obvious reasons: the sign-in is an open role picker. If you would rather be guided, book a demo and we show the system live, including sign-in with your own accounts.

Try the demo right away