Terms of service

Last updated: July 2026

1. The service

Student MFA provides a hosted multi-factor authentication service for education organisations using Microsoft 365, comprising an external authentication method for Microsoft Entra ID, an administration portal and associated policy automation (the "Service").

2. Your account

The Service is offered to organisations, not individuals. By onboarding, you confirm that you are authorised to act for your organisation and to grant the Microsoft tenant permissions the Service requests. You are responsible for the accuracy of the groups, IP ranges and learner data you configure.

3. Acceptable use

You agree not to misuse the Service, attempt to access other organisations' data, reverse engineer the platform, or use it for any unlawful purpose. Learner credentials issued through the Service must be distributed through appropriately controlled channels.

4. Prerequisites

Certain features rely on Microsoft licensing held by your organisation (for example, Microsoft Entra ID P1 for Conditional Access). We are not responsible for functionality limited by your Microsoft licensing or configuration outside the Service.

5. Availability and support

We aim for high availability but the Service is provided "as is" without a guaranteed uptime unless agreed in a separate order. Because policies default to report-only and the Service acts as a secondary factor, an outage does not lock users out of accounts unless enforcement is enabled by you.

6. Data protection

We process personal data as described in the privacy notice and act as processor to your organisation as controller. A data processing agreement is available on request.

7. Termination

You may offboard at any time from the portal, which reverts the changes made in your Microsoft tenant. Either party may terminate for material breach. On termination you may request permanent deletion of all platform data.

8. Liability

To the maximum extent permitted by law, our aggregate liability under these terms is limited to the fees paid for the Service in the twelve months preceding the claim. Nothing in these terms limits liability that cannot be limited by law.

9. Changes

We may update these terms from time to time. Material changes will be notified through the portal or by email to registered administrators.

10. Contact

Questions about these terms: hello@studentmfa.co.uk, or write to The Old Corn Mill, Congleton Road, Macclesfield, SK11 9JR.