Trust center
Last updated: November 11, 2026
Built for minors’ data
Students and families use private links instead of accounts. Links are random, stored only as hashes, can be revoked, and expire.
School scoping
Every record belongs to one school, and every action checks the user’s school and role.
Secrets and passwords
Passwords are hashed; Google tokens are encrypted; secrets are never written to logs; the code is scanned for leaked secrets on every change.
AI with limits
AI only drafts, gets only what a task needs, and is checked against invented facts. See the AI governance page.
Agreements
Need a data processing agreement or have a security question for your school? Write to us from the contact page.
Questions about this page? Write to us from the contact page.