How Superadjust protects student data
On this page
| What | Where it is hosted |
|---|---|
| The app, its database and files | Microsoft Azure, Australia East. |
| AI features | Azure OpenAI, Australia East. |
| Amazon Web Services, Sydney. |
The Privacy Policy names every provider we use.
Superadjust encrypts these fields itself, with AES-256, before they reach the database:
- Student first and last names
- DSM-5 diagnoses
- Focus areas (what affects learning)
- Level of adjustment
- A student's profile notes and tags
- Every file attached to an entry
Row-level security in the database keeps each school's records apart: a request made by someone at one school only reaches that school's records.
- Teachers can see every student at the school; coordinators see every student and teacher. See what each role can do.
- A student's record can show Initials only to teachers who don't teach them.
- Only permitted roles can change or archive evidence. Every entry is timestamped, and an edited entry shows Edited.
- Lifecycle events, such as a school closing, are written to an audit log.
Sign-in is handled by Supabase Auth, with email and password or a Google or Microsoft account. You can sign out every other device from Settings, Security.
- That every view of a record is logged.
- That records are tamper-proof, immutable or end-to-end encrypted.
- ST4S certification.
- Two-factor sign-in or school-wide single sign-on.
The security page has the full picture, and your school's data covers how long records are kept.