Home / Security notes
SchoolKick · v0.3.0
Security controls and what remains to be done.
SchoolKick includes role-checked routes, PostgreSQL row-level security, session cookies and a kept attendance correction history.
This early release has not had an independent security audit. Use HTTPS, restrict signup and server access, take tested backups and do not expose real learner data until the operator has reviewed the deployment.