COMPENDIUM

Technology & security

Your School's Data, Private and Protected.

Student records, family details and finances deserve more care than any other data a school holds. Compendium gives every school its own private database, encrypts what it stores and sends, and shows each person only what their role allows.

1

Database per School

Never shared with another school

100%

Encrypted Connections

HTTPS on every page and request

0

Ads or Data Sales

Paid for by schools, never by data

4

Role Views

Students, parents, teachers and office

Privacy

A Privacy Promise in Plain Words.

What we do with your school's information, and what we never do. No fine print to dig through.

Your Data Is Yours

Student records, family details and finances belong to your school. We hold them to run Compendium for you, and for nothing else.

No Ads, No Selling

Compendium is paid for by schools. We never show ads, and we never sell or rent student or family information to anyone.

Only Who Needs It

Teachers see their own classes, parents see their own children and students see their own work. Office access is set by role.

Private Files Stay Private

Uploaded documents and photos are never public. Each file opens through a link that expires after a few hours.

Take It with You

Export your people, classes, grades and finances as spreadsheets whenever you like, with no lock-in.

Gone When You Go

If you leave Compendium, we hand you a full export and then delete your school's database and files.

Security, layer by layer

Protected at Every Step.

From the moment someone signs in to the file they open, every layer has its own protection, so no single mistake exposes your school.

  1. 01

    In Transit

    Every connection is encrypted with HTTPS, from phones, laptops and partner systems alike.

    HTTPS everywhereSecure cookies and headers
  2. 02

    At Rest

    Each school's records live in their own database, separate from every other school. Keys for outside services are sealed with AES-GCM using a key unique to your school.

    Database per schoolAES-GCM sealed keys
  3. 03

    Signing In

    Passwords are stored only as salted hashes. Repeated wrong passwords lock the sign-in, and every session is tied to its own school.

    Hashed passwordsLockout after failed attemptsSchool-bound sessions
  4. 04

    Access

    Every request is checked on the server against the person's role and your school's feature switches. Hiding a button is never the only guard.

    Role checks on every requestSwitched-off features refused
  5. 05

    Files

    Documents, photos and message attachments are stored privately per school and opened through short-lived links.

    Private storage per schoolLinks that expire
  6. 06

    Integrations

    Partner keys are never sent back to the browser, only their last four characters. Outgoing webhooks are signed so partners can verify them.

    Keys never shown in fullHMAC-SHA256 signed webhooks
  7. 07

    Engineering

    Automated tests run before every release, including tests that try to read one school's data from another and must fail.

    Tests on every changeIsolation tests between schools
How it fits together

Every School Stands Alone.

Requests reach Compendium over HTTPS, are matched to their school and role, and only ever touch that school's own database, files and keys.

  • Isolated by design: no query can reach another school's records
  • Close to your families: pages are served from a global network, so the app stays fast everywhere
  • An installable app for phones and tablets, updated in place with every release
Studentsphone · tablet
Parentsphone · web
Teachersweb
Officeweb
HTTPS · school-bound sign-in
Compendium edgeweb address → school · role checks · feature switches
one private database per school
Your schooldatabase · files · keys
School Bdatabase · files · keys
School Cdatabase · files · keys
signed webhooks · encrypted keys
Accounting
Payments
Payroll
Content
Questions

Security and Privacy, Answered.

What schools and families ask us most. Have another question? Ask us directly.

Ask a Question

Who at Compendium Can See Our Data?

Only the small team that keeps Compendium running, and only when it's needed to support your school, such as during your move or when you ask for help.

Where Is Our Data Stored?

On a global cloud network that serves pages close to your families. Each school's database and files are kept separate from every other school's.

Do You Sell Data or Use It for Advertising?

No. Compendium has no ads and we never sell, rent or trade student or family information.

Can Parents See Other Families' Information?

No. Parents see only their own children and their own account. The directory shows only what your school chooses to share, and only to the roles you allow.

Can We Get All of Our Data Out?

Yes. Export spreadsheets of people, classes, grades and finances at any time, and if you leave we provide a full export before deleting your school.

What Happens If a Password Is Guessed?

Repeated wrong passwords lock the sign-in, and a sign-in only ever works at its own school.

See How Compendium Protects Your School.

We'll walk your team through roles, privacy and data on a short call, and answer anything your board or families want to know.