Focus is a modern, cloud-hosted platform that enforces your school-day device policy over a secure, signed channel — with no dependency on your MDM. This overview answers the questions that come up in IT and security review.
| Hosting | Amazon Web Services (US region). Application runs in a private network; the database and cache are not publicly reachable. |
| Encryption | TLS in transit; encryption at rest for the database, cache, and stored secrets (AWS-managed keys / Secrets Manager). |
| Device channel | Commands delivered by silent push with per-device HMAC-signed messages — a leaked device token alone cannot impersonate a device. |
| Access control | Role-based admin access; least-privilege cloud IAM; audit log of administrator actions. |
| Reliability | Managed database with automated daily backups and point-in-time recovery; multi-availability-zone deployment; health-checked services. |
| Data handling | Data minimization by design; retention configurable; deletion on request or at contract end. See the Student Data Privacy one-pager. |
Works with your existing MDM. Jamf, Intune, or Google can be wired in as optional, non-blocking redundancy — an extra lockdown path that never gates Focus enforcement. Pilot and enforce with zero MDM dependency, then layer your MDM on your timeline.
Need our security questionnaire, data-privacy agreement, or architecture detail? Request it through our contact form — we'll turn it around quickly to keep your review moving.