Privacy & Data Handling
This system processes operational metadata and audit logs to ensure secure management of district DNS infrastructure. We prioritize transparency and security in how administrative data is collected, stored, and protected.
What We Collect
- Administrative Identity: Login timestamps, user principal name (UPN), and IP address during sessions via central SSO.
- Change Metadata: Records of who created or modified specific DNS entries (CreatedBy/LastUpdateBy) and when.
- Operational Context: Optional notes attached to records for team communication or audit trails.
Security Controls
- Access Control: Functions restricted by Role-Based Access Control (RBAC) tied to Active Directory groups.
- Authentication: Enforced Multi-Factor Authentication (MFA) and FIDO2 passkey support.
- Integrity: Cryptographic checksums generated for all record changes to detect unauthorized tampering.
Data Retention & Sharing
Administrative audit logs and change history are preserved in accordance with district data retention policies (typically 1 year for active logs). Aggregated data is not shared with third parties or advertisers.
Note: While administrative metadata is protected, the actual DNS records (A, CNAME, TXT, etc.) are by definition public data served to the global internet. Do not place sensitive information in public DNS records.
Privacy Inquiries
To request an audit of your administrative actions, report security concerns, or ask about data handling practices, please contact the system maintainer.
Contact Leon ShaoGreat Falls Public Schools · Information Technology Services · Compliance