Security

Data is stored in a Google Cloud SQL database with encryption at rest, and all traffic to and from the app is encrypted in transit (HTTPS/TLS).

Passwords are never stored in plain text — only a securely hashed version (bcrypt), so we can't see or recover your actual password. Repeated failed sign-in attempts temporarily lock an account after 5 tries to slow down credential-guessing attempts. You can also sign in with Google instead of a password.

Every account's caseload is fully isolated from every other account's — students, goals, and contacts you enter are scoped to your account and are never visible to other users of the app.

Billing is handled entirely by Stripe. Your card details are sent directly to Stripe and never touch our servers.

We use a small, fixed set of service providers to run the app:

• Google Cloud — hosting and database storage
• Google Sign-In — optional Google account authentication
• Stripe — subscription billing and payment processing
• Resend — sending account emails (welcome, password reset, notifications)

We keep your data for as long as your account is active — there's no separate retention clock running down in the background. You can delete any individual student record at any time, or permanently delete your entire account and all of its data yourself from the Danger Zone on your Profile page. Deletion removes the record from our production database immediately. We also keep encrypted, rolling database backups for disaster recovery, retained for 7 days on a fixed schedule — a very recent deletion could still exist in one of those backups for up to a week before it fully ages out, the same way it would with virtually any backed-up system.

If your district requires a signed data-sharing or data processing agreement before staff can use an outside tool with student-related information, see our Data Processing Agreement.

Found a security issue? Email hello@caseload.cloud — we take reports seriously and will respond promptly.