Security at Progress Card

Every record belongs to one institution, and database-level access rules make sure staff only see their own institution and parents only see their linked children.

Marks are approved before publication, changes are recorded in an audit log, and AI providers never receive credentials or more data than a report needs.