Security
Your studio's data, and the records to prove it.
You're trusting us with children's medical details and families' payment methods. Here is specifically what protects them.
What's in place
MFA, not optional
Owners and admins must set up TOTP two-factor authentication before they can use the staff app, with recovery codes. The API enforces it, not just the UI.
Account protection
Passwords are checked against known-breached lists, sign-in attempts are throttled and lock out, and you can sign out every session everywhere at once.
Least privilege
Five roles with 28 distinct permissions. Teachers see only their own classes; connecting a payment processor and exporting data are owner-only.
Payments stay with Stripe
Card and bank details go to Stripe, never through our database. You are the merchant of record on your own Stripe account.
Audit log
Changes are recorded and readable by owners and admins, including anything the built-in assistant was asked to do, which always needs a human confirmation first.
Browser-level hardening
A Content-Security-Policy with a fresh nonce on every request, same-site secure cookies, origin checks on writes, and the staff app refusing to be framed at all.
A ledger that can't be quietly rewritten
Financial history is append-only, enforced by a database rule rather than by application code: entries cannot be edited or deleted, only reversed. A refund is its own entry with a reason attached. That means the record you show a parent is the record, and nobody, including us, can tidy it up afterwards.
Your data, on the way out as well as in
The account owner can export the studio's data in full at any time. Families can be archived, merged, or erased outright when someone asks to be forgotten, and policy acceptances are versioned so you can show what a guardian agreed to and when.
Sensitive details, where they're needed
Medical notes, allergies and emergency contacts are visible to staff on a roster, because that's the point of recording them, and a guardian only ever sees their own family's students, ledger and messages. Accounting credentials for QuickBooks are encrypted at rest with AES-256-GCM.
Reporting a problem
If you think you've found a security issue, please contact us before disclosing it publicly, and we'll come back to you.
Get started today
A simpler, stronger studio starts here.
Set up your rooms, your season and your tuition, and see what the first billing run would do before a single family moves across.
Opening to studios soon · No credit card required