Built to work offline first
Records live on your own devices. The cloud is a shared copy that devices sync with, not the only copy.
Access
Each device joins with a one time code and then holds its own key. Removing a device cuts off its access immediately. Web app users sign in with a role that limits what they can see.
Our staff
Support staff see only what the support role needs. Sensitive actions, such as resetting a PIN, need the school's permission and are written to an audit trail. Staff accounts can use two step sign in.
In transit and at rest
Connections use HTTPS. Passwords and keys are stored as one way hashes, never in plain text.
Backups
The cloud database is backed up by our hosting provider and we can restore a school's records on request. Schools also keep their own backups on their devices.
Reporting a problem
If you think you have found a security problem, write to email with the details. We will reply within two working days.