Import
CSV with restriction coverage. Mass change is quarantined. Arbor stays the source of truth.
How it works
Import. Evaluate. Invite. Deliver.
The same four steps on every sister product: one source of truth, one evaluator, then the office owns what happens next.
How it works
From last night’s import to a letter the right adult can open.
1Import
Dry-run the register.
CSV with restriction coverage. Mass change is quarantined. Arbor stays the source of truth.
You never publish a half-import.
2Evaluate
Fail closed, every time.
Read, send and invite share one evaluator. Unknown evidence is not an allow.
Emergency never overrides a deny.
Evaluate
Read, send and invite share one evaluator. Unknown evidence is not an allow.
3Invite
GET never activates.
Mail scanners cannot consume a token. Redeem once, after sign-in.
Imported adults stay imported until someone invites.
Invite
Mail scanners cannot consume a token. Redeem once, after sign-in.
4Deliver
Per-recipient outcomes.
In-app, email and print. The archive records who was suppressed and why.
Nobody claims “everyone received it”.
Deliver
In-app, email and print. The archive records who was suppressed and why.
Three surfaces, one evaluator
Parent, office and DSL are not the same product.
They share tenancy and grants. They do not share inboxes, threads or halt notes.
Home and inbox
Cards for the children this adult may see. Forms, calendar and office messages stay grant-scoped.
Used by · parents · delegated carers
Letters and threads
Preview exclusions, send, own the reply. Import, invites and print live here.
Used by · school office · administrators
Safeguarding halt
Office copies disappear. Release of a local deny is a DSL power. This is not a case system.
Used by · DSL · deputy
Integrations
CSV now. Arbor later. Never silent write-back.
The register stays in the MIS. Pupil Gate imports, evaluates and engages.
CSV
Dry-run, mass-change quarantine, restriction coverage and office exceptions before commit.
Arbor spike
Connector fields are reserved. Live sync waits for a named owner and a freshness label.
Email console
Signed webhooks, attempt history, unknown until reconciled. Print for paper-only adults.
Start with the office queue, not another newsletter.
Import the register, review restrictions, then invite. The evaluator is already live in the demo.
Today at Riverside
Eligible adults4
Suppressed4
Open exceptionsowned