Data and security

We hold education data to the strictest standard.

Data ownership

School and student data belong to the school and guardians, and can be exported and deleted when the contract ends.

Data in transit and at rest

HTTPS end to end, encryption at rest for databases and object storage, isolated per environment.

Protection of minors

Children's personal information is handled under our Children's Privacy Rules; registration requires guardian consent.

Access control

Least-privilege roles: teachers can't edit exam papers, and the school console can't change the version a class is bound to.