Built by an IT manager at a school in Stockholm.
Skolshield AB is a Swedish limited company, wholly owned by its founder. Here is the company, the contract and the story behind it.
What you want to know before you sign
Skolshield AB, reg. no. 559596-9287, registered with the Swedish Companies Registration Office in 2026 and wholly owned by the founder. No outside owners, no venture-capital clock.
Hetzner in Helsinki, encrypted backups in Germany. No US cloud services in our operations. Your files stay in your own Microsoft 365 environment.
A data processing agreement on the template your lawyer already knows, signed before any school goes live. The data is your property. You can revoke our access whenever you wish.
A full export in open formats on request, a current copy in your own Microsoft 365 environment and source-code escrow that releases the system to you. Your duty to preserve records never depends on us.
Published on the web: SEK 55 per student and year, everything included, an absolute cap for municipalities. Early customers keep their price level for as long as the agreement runs.
You reach the person who built the system directly, by e-mail, Teams or phone, in Swedish and English. No ticket number, no charge per question.
Data protection officers and IT have a page of their own with the roles, sub-processors, logging and retention on one sheet: For the DPO and IT
Who is behind it
John Hammer is the IT manager at Carlssons skola in Stockholm and has built all of Skolshield: the system, the operations and the audit log your DPO will want to see. Before that he administered the school's previous incident system for several years, and that experience is what decided what Skolshield does and does not do.
Skolshield is run from Sweden, for Swedish schools, with the combination the niche demands: everyday life in a school, the Education Act in its spine and the whole system under its own control.
Why it exists
As IT manager I was given the task of deploying an incident management system the school had already licensed. It ran on our own Azure subscription, and the invoice for hosting alone came to SEK 5,500–7,000 a month on top of the licence. Every support ticket was billed separately, and student data was handled in ways that did not live up to GDPR.
At first I just wanted to build a cheaper alternative. But the deeper I dug into the problems, the more I realised that cheaper was not enough, it had to be done right. Genuine GDPR compliance with EU-hosted servers. A complete audit trail. Support for protected personal data. Automatic sync with the student registry.
What makes us different
Transparent pricing
No hidden module costs, no surprises, no charging for basic support.
GDPR for real
Servers in the EU. A complete audit trail for all data access. Support for protected identities (sekretessmarkering and skyddad folkbokföring).
Automatic Sync
SS12000, the standard used by IST, Vklass, Edlevo, Adela and SchoolSoft, or SchoolSoft's legacy API. No manual data entry.
Fast
Page loads under 500ms. Modern, mobile-friendly interface. No heavy installations.
We are the school-law side of student health: from the teacher's first note to the student health team's decision and the principal's report. Everyone sees what belongs to their own role, and we leave the medical record alone. And it should not cost a fortune.
John Hammer, Founder
Want to see the system that came out of it?
Real screenshots, an open demo and a published price list, judge for yourself.