Security at ShowReady OS
Many ShowReady OS users are students who are minors. We built the platform with that in mind from the start -- here's a plain-language answer to "what happens to our data."
Encryption in transit and at rest
All traffic to ShowReady OS is encrypted over HTTPS, and data is stored on managed Postgres infrastructure that encrypts data at rest.
Chapter and district-scoped access
Access control is enforced at the database layer, not just hidden in the interface -- a student, family, advisor, or district admin can only reach the records their role and chapter actually permit, even through a direct API call.
Authentication
Sign in with a password or with Google. We never see or store Google account credentials -- authentication is handled by Google's and Supabase's identity infrastructure, not custom code.
Automatic session timeout
A signed-in session on an inactive device -- a shared classroom computer, for example -- automatically signs out after a period of inactivity, with a warning first.
No ads, no tracking, no data resale
ShowReady OS doesn't run analytics or advertising SDKs, doesn't track location, and never sells personal information -- see our Privacy Policy for the full detail.
Audit logging for administrative actions
Sensitive administrative actions -- approvals, account and access changes, billing changes -- are recorded with who did what and when, so there's a clear record to review.
Questions from a district IT team?
We're happy to walk through our security and data handling practices in more detail before you roll ShowReady OS out district-wide.