Security

httpOnly sessions, tenant-scoped queries, signed Stripe webhooks, hashed SCIM tokens, MFA for privileged staff, and fail-closed operator access. Production hosting is in the UK.

Questions: security@schooladapt.com