Security
Infrastructure
- Encryption in transit (TLS)
- Encryption at rest
- Web application firewall and DDoS protection
- Encrypted backups in Australia, kept 90 days
Access
- Passwordless sign-in by emailed code or Google
- School admins manage their own staff
- Removed staff are signed out immediately
- School admin actions are logged
Product
- Dependency and vulnerability monitoring
- Upload validation
- Error monitoring and alerting
- Public status page and uptime monitoring
Privacy and AI
- Kuraplan Shield keeps student names from the AI
- Chat retention set by the school
- Account deletion on request
- AI-generated content is labelled
Subprocessors
View all 17
Supabase • Database and file storage
Microsoft Azure • Cloud infrastructure and backups
Amazon Web Services • Cloud infrastructure provider
Vercel • Hosting and AI gateway
Anthropic • LLM provider