Is Intelligent Evidence affected by the PHP security issue?

Summary

Intelligent Evidence is not affected by the recently reported PHP security issues. Our platform does not use PHP, and no system we use to hold or process school data runs PHP. Schools do not need to take any action.

Why we are not affected

The vulnerability applies only to systems that run PHP. The Intelligent Evidence platform is built differently:

• Application: built on Microsoft .NET, not PHP.
• Hosting and storage: hosted entirely within Microsoft Azure, using Azure-managed services for application hosting and data storage.
• AI processing: uses Azure OpenAI, running within Microsoft Azure.

Because none of these components use PHP, the issue does not apply to the environment that holds your staff, pupil or parent data.

Common questions from schools

• Are any of your systems that hold our data affected? No part of our platform or its supporting services uses PHP.

• Have the necessary security updates been completed? No PHP-related updates are needed. Our Azure services are kept up to date through Microsoft's managed patching, alongside our own regular update process.

• Have you checked with your hosting provider and other third-party suppliers? Yes. Our hosting and AI services are provided by Microsoft Azure, which does not rely on PHP for the services we use.

• Have you found any signs of unauthorised access? We have no indication of any unauthorised access to our systems or to school data.

• Is there anything our school needs to do? No. There is nothing you need to do in relation to this issue.

Further questions

If you need more detail for your records, or would like this confirmation in a different format, please contact us at gdpr@intelligentevidence.co.uk.