Security
These are the safeguards built into the product today. They describe how the software works; they are not a certification or a statement of regulatory compliance.
Separate practices
Each practice's records are isolated from every other practice. This portal is a separate product with its own accounts and data; it has no school connections and no shared child identity mapping.
Assigned clients only
Professionals open only clients on their own caseload. Coaches never see clinical-only content. Assistants and guardians never see session notes.
Two-step sign-in
Staff and professional accounts must complete two-step sign-in before any client information is shown.
Checked, recorded changes
Every change goes through a server-side check of role, practice and caseload, and is written to an audit log. Error messages never reveal record details.
Family sharing by consent
Guardians see only items a professional explicitly shared, and only while consent is active. Withdrawing consent stops access immediately.
Protected files
Documents are stored privately and opened through short-lived links issued after an access check.
AI with de-identified input
AI Copilot runs on the server, replaces names and contact details with placeholders before each request, and stores results as drafts for professional review.
Not a medical device and not an electronic health record. Read the data processing description or contact us with questions.