Security at Tendroll

Who can see what

Role-based access. Every account is an administrator, staff or family account. Each role sees only the areas it needs. Families see only their own children.

Invitation-only accounts. Staff and family accounts are created by invitation from the program. Program owners manage who has access from inside Tendroll.

One program, one set of records. Each program’s records are kept separate from every other program’s, and access rules are enforced in the database, not only in the app screens.

Accountability

Audit trail. Important actions are recorded with who did them and when. Entries in the audit trail cannot be edited or deleted from inside Tendroll afterward, including by an administrator.

Your records stay yours. Administrators can export program records and download a full backup at any time.

Protecting the connection

Tendroll is served only over encrypted connections, and browsers are told to always use them. The website restricts what scripts and content can load and cannot be embedded inside other sites, which reduces common web attacks. The camera is used only for QR check-in, only on our own pages, and only when you allow it.

Sign-in

You sign in with your email and password. If you forget your password, we email a reset link. Signing out ends your session on that device. No online service can promise perfect security, so we recommend strong, unique passwords and removing access for people who leave your program.

Privacy by design

We do not run advertising or analytics trackers and we do not use children’s information for advertising. See our Cookie Policy for exactly what is stored in your browser.

Report a concern

If you believe you have found a security problem, or something looks wrong with your account, email [email protected] with as much detail as you can. Please do not include passwords or children’s personal information in the message. We will review reports promptly.