Access control
Granular RBAC across student, parent, school, insurer, and agency roles.
Security
Built for trust.
Role-based access, audit logs, encryption in transit and at rest, and a SOC 2-aligned control program.
Audit trails
Sensitive actions are logged for investigation and compliance.
Encryption
TLS in transit and encrypted storage for sensitive records.
Session security
CSRF protection, rate limits, MFA, and trusted-device controls.
Privacy by design
Consent gates and least-privilege data sharing defaults.
Vendor reviews
Security questionnaires and evidence packs available on request.