Security

Children's records deserve more than a login screen

Cadmara enforces access at the data layer, so a mistake in the interface never becomes a breach.

Tenant isolation

Every row belongs to a school. Row-level security policies enforce that boundary in the database, not in the interface.

Student, teacher, head of department, dean, vice principal, principal, administrator and platform owner, each ranked and enforced server-side.

Coursework and documents live in private buckets. Access uses short-lived signed links issued only to entitled users.

Grade changes, payment records, approvals and leave decisions are written to an append-only audit trail.

All traffic is served over TLS, and authentication tokens are short-lived and refreshed automatically.

Schools can export their records at any time, and we do not sell or share data with third parties.

Data protection, retention, acceptable use and how to raise a data request.