How We Protect School Data

School academic records can contain sensitive information about children. Our design starts with separation, narrow access and honest feedback—not a claim that any system is risk-free.

Controls enforced in the product

• Separate school data. Database row-level rules scope school-owned records to the authenticated user’s current school.
• Narrow roles. Teachers, division administrators and site administrators receive different scopes. Administrative screens are not the only boundary; the database checks writes too.
• Controlled owner access. A platform owner explicitly selects a working school. That working mode can administer the selected tenant; role or user preview is separate, labeled and blocked from writing by database triggers.
• Reviewed imports. Source evidence is stored separately from live curriculum. Mapping and promotion require human review, and ambiguous curriculum extraction is held rather than silently guessed.
• Private source material and photos. These use authenticated, school-scoped access rather than public file links.
• Honest saves. Grid edits distinguish saving, server-confirmed success and failure with retry.
• Controlled email. Schools configure sending, recipients are checked, and test messages use explicit destinations and synthetic content by default.

Operational work still matters

Code controls do not replace school policy, staff training, incident response, backups, vendor management or periodic access review. We do not describe MyStudentPulse as certified under a particular framework unless that certification has actually been completed.

Current limits stated plainly

• PDF and Arabic/RTL curriculum extraction still requires human review and is not guaranteed for every document.
• Formal department-head approval status is still developing; schools currently designate the staff who review and maintain courses.
• Cross-school authorization has automated checks and database controls, but it still requires recurring multi-account operational verification.
• No system can promise perfect security or uninterrupted availability.

Questions or reports

Contact hello@mystudentpulse.com. Read our Privacy Notice for data-use and retention information.