Tenant isolation
Every business record is tenant-scoped with application checks and database row-level security.
Security
Tutoring Lab is designed to keep sensitive learner information out of texts, URLs, logs, and general-purpose parent accounts.
Secure family actions
Opaque, expiring, revocable links use risk-based SMS verification before private details are shown.
Auditable changes
Consent, enrollment, communication, scheduling, payments, credits, and refunds create durable audit events.
Provider boundaries
Card data stays with Stripe and carrier transport stays with Twilio behind replaceable adapters.