Privacy and security
Your documents never leave your office
Most driving-school management software asks you to upload your students' ID documents, proof of residence, and parental consents. That creates a store of sensitive data at a third party — a store that, one day, becomes your problem: yours, the school's, not just the provider who built it.
We chose the opposite from the product's design, not as an afterthought fix: the app notes which evidence exists, where it's kept at your school, and whether it's up to date — without ever keeping a copy. The register replaces the vault. It's a design choice, not a missing feature waiting to be added.
Your school keeps the documents. Only the status of each piece of evidence (up to date or not) is recorded — never the file.
How it's enforced, concretely
Six concrete guarantees rather than a vague promise — each verifiable directly in the app by your school.
No sensitive document stored
File uploads are disabled by default for every school. This isn't a technical limitation — it's the product's model: an evidence register, not a document vault. Even when a school exceptionally enables uploads for a specific case, the requirement of a configured off-site backup remains a condition, never a footnote.
Strict per-school isolation
Every request is scoped to your school, server-side — never just at the interface level. A school can technically never see another's files, even in the event of a display error: the restriction is enforced at the database query level, not just hidden on screen.
Complete activity log
Who changed what, when — including in archived files. Every change to a student file is tracked, with the author and timestamp, viewable from the Activity tab. A staff change never erases this history: accountability survives the departure of whoever made the change.
Your data stays yours
Full CSV export anytime, from the app, without writing to us. Full deletion on simple request — during or after the trial, no condition, no negotiation. Nobody should have to argue to get back or erase their own data.
Encrypted backups
The database is backed up automatically every night, encrypted before it even leaves the server (AES-256-GCM) — an outage never costs you your compliance register. Even full access to backup storage reveals nothing without the encryption key, kept separately.
SMS under your control
No real sending until you explicitly enable it. By default, reminders are prepared and logged — you see exactly what would go out, to whom, before anything actually goes out.
Why it matters for your school
A store of ID documents and minor students' records is exactly the kind of data a driving school must protect most seriously — and exactly what typical management software accumulates without a second thought, simply by offering uploads by default. The less we store, the less there is to protect, and the less a breach elsewhere (at us or at another provider) can expose you to.
This choice also supports your school's obligations around personal-information protection — Québec's law on the subject applies to any organization that collects data from its clients, including driving schools. We don't claim to replace your own compliance assessment, but a product that never asks for your sensitive documents removes, from the outset, the riskiest question of all: what happens to a document once it's been uploaded to a third party?
Questions about security?
See the FAQ, see how the app works, or write to us directly.