Children's information deserves the most care

Every school kept apart

Each school's records are scoped to that school on every request, and automated checks run against the code to keep it that way.

Access by role

Teachers, finance, parents, students and gate staff each see only what their role needs. A parent sees their own children and no one else's.

Passwords handled properly

Passwords are stored as one-way hashes, never as text, and two-factor sign-in is available for staff accounts.

Limits on sign-ins and APIs

Requests are rate-limited, per person for the phone app and per address for everything else, to blunt guessing and floods.

Audit logs

Enterprise schools get a record of who changed what. When our support team views a school to help, that access is recorded too.

Payments through specialists

Card and bank payments are taken by Paystack and Stripe. Card numbers never touch Montessa.