Why access is invite-only

There is no public sign-up form for tutors, parents, or students. Only a tutoring center creates its own organization; everyone else joins through an invitation that a center issues and can revoke.

Why not open registration

Student records are the most sensitive data on the platform. Open registration would mean deciding, after the fact, which organization a new account belongs to. Invitations make that association explicit at the moment the account is created.

What enforces it

Tenant-facing access is enforced with row-level security in the database, not only by hiding buttons in the interface. Tenant records are scoped by organization, and parents reach their children through recorded guardianship links rather than guessed identifiers.

Age-appropriate access

Students under 13 do not get an independent login. They open assigned work through a restricted view inside their parent's session. When the center enables student logins, students 13 and older can have their own account once parental consent is on record.

What gets recorded

Sensitive changes leave a trail. Grade changes and payment events are written to an append-only audit log, and the client is never trusted to write those entries itself.