Security at Tendroll
Tendroll™, operated by Scanvale LLC, holds records about children, families and staff. This page describes the protections we have in place today, in plain language, and is honest about what we have not done yet. It supplements our Privacy Policy and Data Processing Addendum.
Who can see what
Role-based access. Every account is an administrator, staff or family account. Each role sees only the areas it needs. Families see only their own children.
Invitation-only accounts. Staff and family accounts are created by invitation from the program. Program owners manage who has access from inside Tendroll.
One program, one set of records. Each program’s records are kept separate from every other program’s, and access rules are enforced in the database, not only in the app screens.
Where your data is kept
In the United States. Tendroll’s records are stored and processed in the United States. Our database, sign-in and file storage run on Supabase; the website and app are delivered through Cloudflare; emails are sent through Resend; and online payments are handled by Stripe. The full list of these service providers, and what each one does, is in Section 7 of our Data Processing Addendum. We give at least 30 days’ notice before adding a new one.
Encrypted everywhere. Information is encrypted while it travels between your device and Tendroll (TLS 1.2 or higher), and stored records and files are encrypted at rest with AES-256.
Backups. Administrators can download a full backup of their program’s records at any time from inside Tendroll. Automatic scheduled database backups with point-in-time restore are not turned on yet; see our Trust Center for current status.
Accountability
Audit trail. Important actions are recorded with who did them and when. Entries in the audit trail cannot be edited or deleted from inside Tendroll afterward, including by an administrator.
Your records stay yours. Administrators can export program records and download a full backup at any time.
Limited access on our side. Only the people who need it to run and support Tendroll can reach the systems that hold program records, and that access is logged.
Protecting the connection
Tendroll is served only over encrypted connections, and browsers are told to always use them. The website restricts what scripts and content can load and cannot be embedded inside other sites, which reduces common web attacks. The camera is used only for QR check-in, only on our own pages, and only when you allow it.
Sign-in
You sign in with your email and password. If you forget your password, we email a reset link. Signing out ends your session on that device. No online service can promise perfect security, so we recommend strong, unique passwords and removing access for people who leave your program.
Payments
When a program uses online tuition payments, card and bank details are collected and processed by Stripe, a PCI DSS Level 1 certified payment provider. Tendroll never receives or stores full card numbers or bank account numbers; we keep only the payment records a program needs, such as the amount, date and the last four digits of a card.
Privacy by design
We do not run advertising or analytics trackers, we never sell personal information, and we do not use children’s information for advertising. See our Cookie Policy for exactly what is stored in your browser.
Compliance
Built for children’s privacy laws. Tendroll is designed with the Children’s Online Privacy Protection Act (COPPA) and state child and student privacy laws in mind. Each program controls its own records, and Tendroll handles them only on the program’s behalf, as described in our Data Processing Addendum.
Audited service providers. The companies that store and deliver Tendroll’s data are independently audited and certified for their own services:
- Supabase (database, sign-in and file storage): SOC 2 Type II and ISO/IEC 27001.
- Cloudflare (website and app delivery): SOC 2 Type II, ISO/IEC 27001, ISO/IEC 27701 (privacy) and ISO/IEC 27018 (protection of personal information in the cloud).
- Stripe (online payments): PCI DSS Level 1, the highest level for handling card payments, plus SOC 1 and SOC 2 Type II.
- Resend (email delivery): SOC 2 Type II.
Tendroll’s own audit. Tendroll itself has not yet completed an independent security audit such as SOC 2, and we will not claim SOC 2 compliance unless and until an auditor has issued a report. If your program needs a completed security questionnaire or a signed copy of our Data Processing Addendum, email [email protected].
If something goes wrong
If we confirm a security incident involving a program’s personal information, we will notify that program’s administrator without undue delay, and in any event within 72 hours, with what we know about what happened, what was affected and what we are doing about it.
Report a concern
If you believe you have found a security problem, or something looks wrong with your account, email [email protected] with as much detail as you can. Please do not include passwords or children’s personal information in the message. We will acknowledge your report within three business days. If you are a security researcher, please give us a reasonable chance to fix a problem before sharing it publicly.