Maestro SIS Technical Specifications
Maestro SIS is a cloud-based student information system from BocaVox, used by colleges and universities, career and technical schools, continuing education programs, virtual schools and K-12 organizations. This page covers how it is hosted, what it connects to, how student data is protected, and what implementation looks like.
Last updated: October 2026
Cloud-native and always current
Maestro SIS is delivered as software-as-a-service on Microsoft Azure, so there are no servers to buy, install or maintain. Staff, faculty and students use it in any current web browser, and BocaVox handles hosting, patching and upgrades.
US hosting regions
Production in Azure East US 2 with failover to Azure Central US. US institutions' data stays in US data centers.
Any device
Works in any current browser on Windows, macOS, iOS and Android, with no client software.
Modern architecture
Angular front end and .NET 10 back end with CQRS, deployed continuously on Azure.
OPUS 5.1
The current release. A major release ships every year, and every upgrade is included in the license.
450+ configurable parameters
Deadlines, fees, workflows, grading scales, notifications, permissions and custom fields are settings your administrators change themselves. When you need something new, BocaVox's own development team builds it.
Connects with the systems you already use
Maestro SIS keeps your LMS, payment gateway, campus login and business tools in sync, so information is entered once and flows wherever it is needed. Open REST and SOAP APIs connect anything else.
LMS
Two-way sync of rosters, enrollments and grades, with single sign-on from the student portal.
Canvas
Brightspace
Moodle
ClassroomPayments
PCI-compliant gateways post online payments straight to the student ledger.
Stripe
Authorize.Net
PayPal
ElavonSingle sign-on
Users sign in with the campus account they already have, with multi-factor authentication.
Entra ID
Google
OktaBusiness & reporting
CRM, e-signature and analytics tools, alongside 100+ reports built into Maestro.
Salesforce
DocuSign
Power BI
TwilioStudent data, protected at every layer
Maestro SIS encrypts student records, limits access by role and logs every change. It supports FERPA, HIPAA and PCI DSS requirements, and BocaVox completes an independent NIST CSF 2.0 assessment and third-party penetration testing every year.
Encryption
AES-256 at rest and TLS 1.2+ in transit, with keys held in Azure Key Vault.
No SSNs as IDs
Maestro assigns its own student IDs. An SSN is never a login or record key.
Role-based access
Each field and page can be editable, view-only or hidden for each role.
24/7 monitoring
Microsoft Sentinel, Defender and Azure Monitor watch the platform around the clock.
Full audit trail
Every change records who made it, when, and the old and new value.
You own your data
Returned on request, never sold, and never used to train AI models.
Always on, always backed up
Maestro SIS carries a 99% uptime SLA and runs in two Azure regions with automatic failover, so registration periods and grading deadlines are protected. Data is backed up daily with point-in-time recovery.
Uptime SLA
A contractual commitment, with patching outside business hours.
Recovery point
At most 15 minutes of data at risk in a failure.
Recovery time
Service restored within two hours.
Daily backups
Point-in-time recovery, with weekly full backups kept three months.
Live in 4–10 months
Most Maestro SIS implementations go live in 4–10 months, depending on scope and integrations. A dedicated BocaVox team works with you from the first scope meeting through go-live, and support continues after launch with phone, ticketing and a dedicated account manager.
Discovery
Your goals, processes, integrations and reporting needs.
Configuration
Calendars, programs, rules and roles set up in a test environment.
Data migration
Validated import of student history from your current system.
Testing & training
User acceptance testing and role-based training for each team.
Go-live
You decide when you are ready, with extra support at launch.
AI on your terms
Maestro SIS 6.0, releasing from summer 2027, lets your institution connect the AI assistant it chooses. Every AI action follows the same permissions as the person using it, and your data and AI usage stay on your own account.
Connect your AI assistant
A built-in Model Context Protocol (MCP) connector lets the assistant you choose read and, if enabled, update Maestro data.
Bring your own key
An optional assistant inside Maestro runs on your own Anthropic, Azure OpenAI or Google account.
Same permissions, fully logged
AI tools see only what the signed-in user can see, and every action lands in the audit log.
Technical specifications FAQ
See all FAQs →Where is Maestro SIS hosted?
Maestro SIS is hosted on Microsoft Azure as cloud SaaS, with production in Azure East US 2 and failover in Azure Central US. All data for US institutions stays in United States data centers. No on-premises servers or hardware are required; the system is used through any current web browser.
Does Maestro SIS support single sign-on?
Yes. Maestro SIS supports single sign-on through SAML 2.0, OAuth 2.0 and LDAP, and federates with Microsoft Entra ID, Google Workspace, Okta and Shibboleth-based campus identity providers. Multi-factor authentication is supported, and users can move from the Maestro portal into the LMS without signing in again.
Does Maestro SIS have an API?
Yes. Maestro SIS provides REST and SOAP APIs exchanging JSON and XML over HTTPS, with webhook event delivery, plus the Maestro Integration Module for scheduled and near-real-time synchronization with LMS, payment, financial aid, CRM and reporting systems. Institutions can license the API for their own developers.
Which LMS platforms does Maestro SIS integrate with?
Maestro SIS has delivered production two-way integrations with D2L Brightspace, Canvas, Moodle, Schoology, Agilix Buzz, Edgenuity, Great Minds and Google Classroom. Rosters, sections and enrollments flow out; grades, assignments and activity flow back. Single sign-on carries the user from Maestro into the LMS in one click.
Is Maestro SIS FERPA compliant?
Maestro SIS supports FERPA requirements through role-based access control, encryption at rest and in transit, field-level audit logging, and configurable data retention. BocaVox personnel receive annual FERPA training, and the institution owns its data. BocaVox does not use, share or sell institutional data.
Is Maestro SIS HIPAA compliant?
Maestro SIS supports HIPAA requirements through the same controls that support FERPA: role-based access, AES-256 encryption at rest, TLS 1.2+ in transit, and field-level audit logging capturing user, time and old-versus-new value. Institutions with HIPAA obligations have run Maestro SIS in production, including in graduate medical education.
How long does Maestro SIS implementation take?
Most Maestro SIS implementations go live in 4 to 10 months, depending on scope, integrations and institutional decision cycles. A dedicated BocaVox team handles discovery, configuration, data migration support, testing and role-based training. The institution, not BocaVox, decides when the system is ready for production.
What AI features is Maestro SIS adding?
Maestro SIS 6.0, releasing from summer 2027, adds a built-in Model Context Protocol (MCP) connector so institutions can connect the AI assistant of their choice, plus an optional bring-your-own-key assistant running on the institution's own Anthropic, Azure OpenAI or Google account. Every AI action follows the signed-in user's own permissions and is recorded in the audit log.
See how Maestro SIS fits your institution
Talk with an SIS specialist about your programs, integrations and data, or download the capability statement to share with your team.