Data Protection
Markshles EDU follows a shared-responsibility data-protection model. The institution determines what school-controlled information is collected, why it is needed, who may access it and how long it should be retained, subject to applicable law and contract. Markshles provides platform controls and processes data as necessary to provide the contracted service.
Customers should configure roles according to least privilege, periodically review access, remove former users, use available security controls, establish internal retention practices and keep independent records when required by law or operational risk.
Cloud SaaS and Dedicated Deployment can have different infrastructure and backup responsibilities. For customer-managed Dedicated installations, infrastructure protection and recovery remain with the customer unless specifically included in a managed-service agreement.
Data protection cannot eliminate all risk. Cyber incidents, compromised customer credentials, third-party outages or force-majeure events can affect availability or confidentiality. Responsibilities and notification duties are governed by applicable law and written agreements.