Direct answer
Edves covers NEMIS and state EMIS reporting and operates under the Nigeria Data Protection Act 2023 as a data processor acting on the school’s instructions.
Returns are generated from operational records rather than compiled separately, and pupil data is not used to train general-purpose AI models. The school or ministry remains the data controller and retains ownership.
Reporting
- NEMIS & EMIS reporting — enrolment, attendance, staffing, infrastructure, learning materials, performance and transition data structured for national and state returns, generated from the same records that run the school.
Data protection
- NDPA & data protection — controller and processor roles, field-level access control, audit logging, retention, photograph consent, data ownership and exit terms, and the written position on AI model training.
The question to ask first
Ask any vendor whether they are the data controller or the data processor in the arrangement. Under the NDPA 2023 the school is the controller and the vendor is the processor, and the school’s obligations to parents and pupils do not transfer. A vendor claiming their compliance covers yours has either misunderstood the allocation or is hoping you have.
Related
AI in education sets out an adoption sequence that survives scrutiny. Choosing school software lists the compliance questions to put to any vendor, including this one.