Access is caseload-scoped

Every page requires sign-in, and data is scoped to the caseload it belongs to. Members of other caseloads cannot see your students, and neither can signed-out visitors.

Parent share links

Share links are the one exception, and they are deliberately narrow: a single report, an expiry date, revocable at any time, and no access to anything else.

Accountability

Deletions, restores, and membership changes are recorded in the caseload Activity log. Two-factor authentication is available in Settings and is worth turning on for accounts holding student records.