Security Practices

This page describes the technical and operational measures we use to protect Classwire. What we collect, why, and your rights are in the Privacy Policy.

• Hosting: DigitalOcean
• Encryption in transit: HTTPS/TLS

• Role-based access: Teacher, family, and admin roles limit what each person can see
• Authentication: Email and password with hashed credentials
• Family portal: Unguessable personal links rather than shared passwords
• Admin access: Restricted to authorized Classwire, LLC personnel

• Passwords: One-way hashed; never stored in plain text
• Secrets: API keys live in environment variables, not source code

• CSRF protection on forms
• Validated, escaped user input
• Parameterized database queries via ActiveRecord
• Protection against common injection and abuse patterns

We investigate incidents immediately, contain them, and document what happened. If personal information is affected, we notify teachers, families, and individuals as described in the Privacy Policy.

To report a vulnerability or ask a security question:

Classwire, LLC
Contact us via our support form.