School software that treats a child's record as a child's record.

The problem we started from

Schools already keep every fact this software holds — in registers, in spreadsheets, in a filing cabinet behind the office. The trouble is what happens when those facts move online. Attendance software ends up publishing a child's name next to their absences. A "parent portal" leaks phone numbers. A results page becomes a public ranking of thirteen-year-olds.

We took the opposite default. Personal fields are encrypted before they touch the disk. Public pages carry statistics and nothing else. And a statistic computed over fewer than 5 people is not published at all, because a percentage over a group of three is a fact about a person wearing a disguise.

What it does

• Admissions and records — encrypted student and staff profiles, bulk CSV import, classes and sections.
• Attendance — a register a class teacher can mark with one thumb on a phone, working with or without JavaScript.
• Examinations — papers, marks entry, grade scales, ranking, printable report cards, publish and unpublish.
• A public page — the institution's own site: gallery, curriculum, vision, calendar, verified statistics and ratings.
• Events and competitions — registration, participants and publicly posted results.

How it is built

Deliberately unfashionably. Pages are rendered on the server and work without JavaScript; the scripts that exist only make things nicer. There are no third-party fonts, analytics or advertising scripts — the content-security policy blocks them outright — so a school's traffic is not quietly sold on to anyone.

Every institution's data is isolated by a tenancy rule applied at the query layer, so one school cannot see another's records even if a URL is guessed. Encrypted columns are still searchable through keyed hashes rather than by storing anything in the clear.

What we will not do

• Sell or share personal data, or use it to train models.
• Publish a student's name beside a mark, a rank or an attendance figure.
• Show advertising to a school community.
• Hold a school's data hostage — export is available for as long as the account is open, and for 30 days after it closes.