Security and identity
Review authentication, access, permissions, encryption, monitoring and the controls applicable to the product and configuration you are evaluating.
Trust & security
Security and trust should be inspectable.
See how Zegal fits into your environment, what it touches, the controls that apply and the information available for due diligence.
Evaluation scopeExplainable by design
- System role
- Governed workflow layer
- Inputs
- Agreed source data
- Controls
- Rules, roles & approvals
- Outputs
- Documents, updates & evidence
What Zegal does in your environment
A precise role between your systems and your operational work.
Zegal sits between the systems your organisation already relies on and the work people still coordinate manually. The precise systems, data flows, storage, outputs and owners are documented for each implementation.
Responsibility boundaryDefined per implementation
01 · Customer environment
Systems & policy
- Source-system access
- Business rules
- Named approvers
02 · Agreed boundary
Implementation scope
- Data & purpose
- Connection behaviour
- Exceptions & owners
03 · Zegal service
Workflow & evidence
- Configured process
- Documents & status
- Activity record
Compliance
ISO 27001 compliant.
Review Zegal's current compliance status, security controls, policies, supporting documents and subprocessors in the Zegal Trust Center.
Visit the Zegal Trust CenterDue diligence without trust theatre
The information a serious evaluation needs.
Data and privacy
Document the information used, its source, destination, purpose, retention and responsible owner for your implementation.
Reliability and operations
Understand production ownership, support, incident handling, continuity arrangements and any service commitments in scope.
Assurance and procurement
Request the relevant security overview, data-processing documents, architecture materials and due-diligence responses.
Clear product scope
Know exactly what each assurance statement applies to.
Zegal Core
The school-facing workflow infrastructure for institution-specific processes across school systems, rules, documents and approvals.
Zegal CLM
The enterprise contract-lifecycle product for creation, collaboration, review, approval, execution, contract records and renewal visibility.
Zegal Procurement
The shared supplier-workflow product for schools and enterprises, covering vendor intake, evidence collection, procurement documents, approvals, execution, configured system handoffs and renewal visibility.
ZegalSign
The agreement-execution product for routing approvals and signers, tracking completion and retaining the completed agreement and activity trail.
Zegal Apply
The school admissions-management product for prospect and applicant records, family applications, checklists, communications, review, decisions, offers and enrolment handoff.
Zegal People
The HR and staff compliance product, covering employee records, employment documents, onboarding, visas and work permits, policy acknowledgements and renewals.
Zegal Guard
The trips and classroom safety product. It covers risk assessments and approvals; trip workflows also add consent, payment consent, Stripe payments, offline roll calls, checkpoints and weather monitoring.
Enterprise
The audience and implementation route for Zegal CLM and Zegal Procurement—not a separate technical platform.
For evaluation teams
Ask for evidence relevant to your intended workflow.
Tell us the product, systems and data in scope. We will provide the materials relevant to that evaluation rather than a generic bundle of claims.
Start due diligenceBring your technical and compliance teams in early.
We'll map Zegal's role, the systems and data involved, the controls in scope and the ownership model for implementation.