How DNS Angel looks after school data.
IronSights is a cyber security team that protects schools and colleges. DNS Angel lets teachers allow sites through your school's web filter, so we built it the way we'd want any school's tools built: in Australia, separated by school, signed in through accounts you already manage, and on the record.
The essentials
Hosted in Sydney
The DNS Angel app and its database run in Sydney, Australia.
Each school kept apart
Every school's records are separated by the database itself (row-level security), not only by the app's code.
Enterprise sign-in as standard
Microsoft 365 or Google Workspace sign-in for every school, included rather than sold as an upgrade. DNS Angel stores no passwords.
Every action audited
Comprehensive auditing and logging of teacher and admin activity: every allow, end, stop and settings change, with who did it and when, in a record the app can add to but can't edit or delete.
Designed to WCAG 2.2 AA
Built for staff of every ability. Status is never shown by colour alone.
Enterprise sign‑in comes standard.
Staff sign in with the Microsoft or Google account your school already manages. Every school gets it from day one, at no extra cost.
- Included for every school
- Single sign-on is often a paid upgrade in business software. In DNS Angel it's simply how every school signs in.
- Microsoft 365 or Google Workspace
- Staff use the school account they already have. Your school can use either, or both.
- Your sign-in rules still apply
- Multi-factor authentication and the other sign-in rules you set in Microsoft or Google apply to DNS Angel too.
- Only your school, only people you invite
- DNS Angel accepts your school's own Microsoft tenant or Google Workspace domains, and only staff who've been invited.
- No passwords to leak
- DNS Angel never creates or stores one. Sign-ins last a school day (8 hours), and an account you switch off in Microsoft or Google can't sign in again.
Sign in
Enter your school or work email and we'll take you to the right sign-in.
Work email
What DNS Angel keeps, and what it never keeps
DNS Angel keeps
- Staff names, school email addresses and roles
- Your rooms, classes and which teachers they belong to
- Students' names and their classes, if access at your school follows classes
- The school computers with the DNS Agent, and their rooms
- Every allow: site, room or class, time, who started it and how it ended
- The DNS Agent's log of blocked sites, with the user, computer and time
DNS Angel never keeps
- Passwords
- Students' screens, messages or documents
- Wellbeing scores or behaviour ratings
- Payment card details
Where we are, plainly
The Office of the Australian Information Commissioner's code is due to be registered by 10 December 2026. We're following it and will update this page when it's final.
Send us yours. We answer them as part of every evaluation.
Email hello@dnsangel.com with "Security report" in the subject. An IronSights engineer will respond.
Security and privacy questions
Something else? Ask us directly.
Is single sign-on an extra cost?
No. Sign-in with Microsoft 365 or Google Workspace is included for every school, as part of how DNS Angel works.
Who can see our school's information?
Your own staff, by role: teachers see their own access and History; school administrators see the whole school. IronSights operations staff can open your school admin to support you, and each time they do it's recorded.
What does the DNS Agent record?
The DNS Agent logs blocked sites with the user, computer and time, so IT can troubleshoot and IronSights can keep the filter healthy. It doesn't decrypt web traffic or record passwords.
Which other companies process our data?
DNS Angel uses a small number of service providers for hosting, the database and the filtering service. We'll give you the full list, with what each one does and where, during your evaluation.
Bring your security questionnaire.
We'll walk your IT and privacy leads through how DNS Angel is built, hosted and run, and answer your questions in writing.