Security
When we are not sure, we withhold.
If the school has not told us that this adult may see this kind of information about this child, we do not show it, send it, or invite them. The office is told instead, with a name against it.
- Permission is checked when a parent opens an item and again when the office sends
- Restriction evidence that has expired counts as unknown, not as permission
- Attachments are served behind sign-in rather than a public storage link
- Print packs are flagged as stale when the permissions behind them change
- Restrictions, role changes, invites, merges and safeguarding actions are all audited
- An invite link opened by a mail scanner cannot activate an account
- Data is hosted in the UK. We are the processor and your school is the controller.