Trust Center
A plain-language view of how Tendroll™ protects program, staff and family information today, what we watch automatically, and what is not finished. Nothing on this page is marketing: if something is not done, it says so. For the full detail, see our Security page, Privacy Policy and Data Processing Addendum.
In place today
Access rules are enforced in the database itself, not only on the screen. A person who is not signed in can read nothing.
Administrator, staff and family accounts each see only what they need. Families see only their own children.
The website and app are served only over HTTPS, and browsers are told to always use it.
Content-security rules, clickjacking protection and strict referrer settings are on for every page.
Our website, the app and the sign-in service are automatically checked every 30 minutes.
More than 80 automated checks run on desktop and phone each time Tendroll is updated, covering sign-in, key forms and public pages.
Anyone can ask for their account and records to be deleted using the form at tendroll.com/delete-account.
We do not run advertising or analytics trackers and we never sell personal information.
If we confirm an incident involving a program’s personal information, we tell that program’s administrator within 72 hours.
Supabase, Cloudflare, Stripe and Resend hold current third-party audit certifications for their own services. Details are on the Security page.
Partly in place
Administrators can download a full backup of their program’s records at any time. Automatic scheduled database backups and point-in-time restore are not turned on yet.
Not done yet
Tendroll has not completed a SOC 2 audit. We will not claim SOC 2 compliance unless an auditor issues a report.
Not yet done. We will list it here when it is complete.
Who handles your data
These companies store or deliver Tendroll’s data. All data is stored and processed in the United States. We give at least 30 days’ notice before adding a new one. Each holds its own independent audit certifications; Tendroll itself does not.
Database, sign-in and file storage. SOC 2 Type II and ISO/IEC 27001.
Delivers the website and app. SOC 2 Type II, ISO/IEC 27001, 27701 and 27018.
Sends email, such as password resets and invitations. SOC 2 Type II.
Handles card and bank payments for programs that turn on online tuition payments. PCI DSS Level 1. Tendroll never receives full card numbers.
Our documents
Our internal security policies (access, incident response, backups, change management and others) are drafted and awaiting approval. We will share the approved versions with customers on request once they are signed.
Questions directors ask
Who can see my children’s records?
Only the people your program gives access to. Administrator, staff and family accounts each see only what they need, and families see only their own children. Another program can never see your records.
Do you sell or share our information?
No. We never sell personal information, we do not run advertising or analytics trackers, and we do not use children’s information for advertising.
Can I get my records out, or have them deleted?
Yes. Administrators can export records and download a full backup at any time. Anyone can ask for deletion with the form at tendroll.com/delete-account.
What happens if there is a security problem?
If we confirm an incident involving your program’s personal information, we tell your administrator without undue delay and within 72 hours, with what happened, what was affected and what we are doing about it.
Is Tendroll SOC 2 certified?
Not yet, and we will not say so unless an auditor issues a report. The companies that host our data hold their own SOC 2 reports, and everything above describes what Tendroll does today.
How do I report a security concern?
Email [email protected]. We acknowledge reports within three business days. Please do not include passwords or children’s information in the message.
Need something for your program?
If your licensing agency, school or insurer asks for a security questionnaire or a signed Data Processing Addendum, email [email protected]. To report a security concern, use the same address; we acknowledge reports within three business days.