EVA Check-in has completed the full Safer Technologies for Schools (ST4S) assessment, giving schools and education authorities further assurance about the security and privacy controls supporting our visitor management service.
EVA Check-in was assessed in August 2026 against ST4S Framework v2025.1.
EVA Check-in has also joined the ST4S Badge Program.
What is ST4S?
Schools rely on digital services that may process information about students, staff, families, contractors and visitors. Reviewing the security and privacy of each service can require significant time and specialist expertise.
ST4S provides a standardised approach to evaluating digital products used by schools across Australia and New Zealand. It was developed with Australian state, territory, Catholic and independent school sectors and the New Zealand Ministry of Education.
The assessment framework examines areas including:
- Information security
- Privacy and data handling
- Online safety
- Interoperability and system integration
This coordinated approach gives participating education authorities consistent information to support their technology evaluation and onboarding processes. Authorised education-sector users can access assessment information through the ST4S Catalogue.
The New Zealand Ministry of Education also provides guidance explaining how schools and kura can use ST4S information when considering digital services.
How ST4S complements ISO 27001
ST4S and ISO 27001 provide complementary forms of assurance.
ISO 27001 is an internationally recognised standard for establishing, operating and continually improving an information security management system. It examines how an organisation identifies, manages and reviews information security risks across its people, processes and technology.
Theta, the company that develops and operates EVA Check-in, is ISO 27001 certified. This certification extends across Theta’s products, including EVA Check-in. You can read more in our article, ISO 27001 and EVA Check-in, and on our data security and privacy page.
ST4S applies a more education-specific perspective. It assesses an individual digital service against requirements created for Australian and New Zealand school environments.
The ST4S Supplier Guide for Framework v2025.1 describes the full process as comparable to an ISO 27001 or SOC 2 review in its requirement for documentation and evidence. Existing certifications can support parts of the assessment, while suppliers still complete the ST4S process and address its education-specific criteria.
Together, these provide assurance at two levels:
- ISO 27001: the information security management practices supporting Theta and its products
- ST4S: controls relevant to EVA Check-in’s use as a digital service within school environments
Supporting safer school operations
EVA Check-in for schools helps reception and administration teams register visitors and contractors, maintain accurate records of who is on campus and see who is present during an evacuation or emergency.
Schools can configure their check-in processes according to different visitor types and locations. EVA Check-in also provides privacy and security capabilities including:
- Configurable data retention policies
- Data masking and access auditing
- Control over the information collected for each visitor type
- Fine-grained administrative roles
- Encryption for data in transit and at rest
- Microsoft 365 sign-in support
These controls help schools maintain useful visitor records while managing access to personal information throughout its lifecycle.
An ongoing commitment
EVA Check-in is a continuously developed SaaS service. This assessment applies to the EVA Check-in service assessed in August 2026 against ST4S Framework v2025.1.
Our team will continue reviewing security, privacy and data-management controls as EVA Check-in develops and as relevant standards and education-sector requirements evolve.
ST4S participation provides assessment information rather than an endorsement, approval or recommendation by ST4S, Education Services Australia or a participating education authority. Individual jurisdictions and schools may have further requirements based on their circumstances.
Learn more about EVA Check-in for schools
Explore how our visitor management system for schools can help your team manage visitors, contractors and emergency attendance records with appropriate privacy and security controls.
Talk to the EVA Check-in team about your school’s visitor management requirements.
