Staff sign in with Google
Staff use the Google email already on the school roster. There is no separate GuidelineK12 password to create or share. Families do not get accounts. They receive the notices the school sends.
Security
Security and Privacy.
GuidelineK12 holds school discipline records. This page describes how access, sign-in, and records work today. A data privacy agreement with your district is a separate document, signed as part of getting started.
For school leaders
Who can sign in, and who can see what.
People see their part of the work
A teacher works with the incidents they report. A school admin stays in their school. A district admin can work across schools in that district. The people who administer GuidelineK12 itself are a separate, limited group.
There is a record of important actions
When someone changes an incident, sends a parent notification, or changes who has admin access, GuidelineK12 keeps a record of that action. The wording of a parent letter is not copied into that record.
For technology departments
Encryption, sessions, and browser protections.
Integration credentials
District Infinite Campus client secrets are encrypted at rest with AES-256-GCM. They are not shown in the app.
Student and incident records
Those records live in the application database and rely on the database host’s encryption at rest. The application does not separately encrypt every student field.
Sessions
Staff sessions last up to 12 hours. In production the site is served over HTTPS and session cookies are marked secure.
Browser protections
Responses include X-Frame-Options: DENY, X-Content-Type-Options: nosniff, a Content-Security-Policy, and HSTS in production. Authenticated pages and API responses are sent with Cache-Control: no-store.
Compliance and Transparency
- GuidelineK12 does not have a SOC 2 report.
- There is no FERPA certificate from the U.S. Department of Education. The rest of the site says FERPA-minded because access is limited by district, school, and role. That wording is not a certification.
- Schools keep their responsibilities for education records. As a service provider, GuidelineK12 also has contractual and legal responsibilities for how it handles those records. A data privacy agreement is where those responsibilities are written down. This page is not that agreement.
Want to talk through how a district would use this?
We will walk through sign-in, roles, and Infinite Campus sync before you commit.