Introduction

At Enrollio, we built this platform for studios, by a studio. Our mission is simple: help dance studio owners and professionals reach their goals and grow their business with ease.

We focus on:

  • Automation – saving time on daily tasks.

     
  • Communication – keeping everyone connected.

     
  • Scalability – making it easy to grow without limits.

     

We’re always improving our tools so studios can do more. Our success comes from seeing our customers succeed.

Enrollio is an all-in-one sales and marketing platform designed for dance studios. It has everything you need to set big goals—and actually reach them—with help from our expert support team. Studios can even rebrand the platform as their own, making it feel 100% theirs.

 

Our Focus on Security and Risk

The safety of your data is our top priority. Enrollio has strong security systems in place across our company, products, and technology. Our Legal Team and other departments work together to keep your information safe.

 

Our Security Goals

We built our security system based on the best practices in the software industry. Our main goals are:

  1. Customer trust and protection – keep your data private and safe.

     
  2. Service availability – make sure Enrollio is always up and running.

     
  3. Data integrity – keep your information accurate and unchanged.

     
  4. Compliance – meet or exceed industry standards.

     

How We Protect Your Data

Infrastructure Security

  • Cloud hosting – We don’t store data in our offices. Instead, we use top providers like Google Cloud and Amazon Web Services (AWS) in the U.S.

     
    • Google guarantees 99.5% uptime.

       
    • AWS guarantees 99.95–100% uptime, plus strong disaster recovery and security certifications (SOC 2, ISO 27001).

       
  • Network security – Our system uses firewalls, filters, and access controls. Unauthorized connections are blocked by default. Rules are reviewed often.

     
  • Configuration management – Servers are automated and always updated. If one drifts from the standard setup, it’s fixed within 30 minutes.

     
  • Logging – Every action in Enrollio is logged and stored securely. Only a few authorized engineers can access these logs.

     
  • Monitoring & alerts – Our system detects unusual behavior (like attacks or errors) and automatically responds or alerts the right team.

     

Application Security

  • Web app defenses – All customer content is protected with firewalls and monitoring tools. We block attacks like DDoS and follow OWASP Top 10 best practices.

     
  • Software development – We update often. All code is reviewed, tested, and secured before going live. Failures are rolled back immediately.

     
  • Vulnerability checks – We run regular scans, annual penetration tests, and fix issues quickly.

     

Customer Data Protection

  • Data rules – Customers should not store sensitive info (credit cards, Social Security numbers, etc.) in Enrollio.

     
  • Tenant separation – Each studio’s data is kept separate and secure.

     
  • Encryption – Data is encrypted both in transit (while moving) and at rest (while stored). Passwords follow industry best practices.

     
  • Key management – Encryption keys are managed securely and rotated regularly.

     

Data Backup & Recovery

  • Systems are backed up daily and stored safely.

     
  • We keep 7 days of backups for easy recovery.

     
  • Customers can restore deleted items for up to 30 days (contacts, notes, tasks, etc.).

     
  • Additional exports and APIs let you keep your own backups if needed.

     

Identity & Access Control

  • User management – Studio owners can control who has access and what permissions they have.

     
  • Login protections – Minimum 8-character passwords with special characters, plus two-factor authentication (2FA).

     
  • Employee access – Enrollio staff can only access accounts temporarily (max 24 hours) and only with logs and approvals.

     

Company Security Practices

  • Background checks – All employees are screened before hiring.

     
  • Policies – Written security policies are updated yearly.

     
  • Training – Staff complete ongoing cybersecurity and phishing awareness training.

     
  • Vendors – Third-party providers are vetted for strong security.

     
  • Devices – Company laptops are encrypted and monitored with Mobile Device Management (MDM).

     

Compliance and Privacy

  • Payments – We don’t store credit card data. Payments are handled by PCI-compliant processors.

     
  • Privacy – We don’t sell personal data. Logs may be retained for security and compliance.

     
  • GDPR – Enrollio has tools to help you meet GDPR requirements, though compliance depends on how you use the product.

     

Breach Response

If a data breach happens, Enrollio will notify customers as required by law.

 

Final Notes

This document is for reference only and may change as we continue to improve our protections.

Questions? Contact us at support@enrollio.ai.