Skip to content
Platform

One wall of pigeonholes.
Every module gets a slot.

Main Office Works is one codebase and one database, many tenants. Districts, schools, staff, students, and school years live in a shared Core; modules sit on top of it, governed by the same roles and the same audit trail. Nothing is bolted together after the fact.

ConductStudentOps
Teacher CoverageStaffOps
DeviceOpsDevices
Staff AttendanceStaffOps
AdminConsole
Next moduleSame wall
One Core
Districts · schools · staff · students · school years · roles

Every slot reads and writes the same wall. No module keeps its own copy of a student.

The Core

Shared identity, so the data lives in one place.

Teacher mailboxes work because there's one wall and everyone knows it. The Core is that wall: one set of identities every module trusts, instead of five apps with five copies of the same student.

Oak teacher mailboxes in morning light, folded memos in a few slots.
ConductStudentOps
Teacher CoverageStaffOps
DeviceOpsDevices
Staff AttendanceStaffOps
AdminConsole
Next moduleSame wall
One Core
Districts · schools · staff · students · school years · roles

Every slot reads and writes the same wall. No module keeps its own copy of a student.

Districts & schools

One install serves many districts; each district has its buildings. Data is isolated by district and school.

Staff & students

One identity per person, shared by every module. A student is entered once, ever.

School years

Operations are scoped per year, so each year's record stays clean and comparable.

Roles

An authorization matrix maps each role to exactly the actions and screens it should have.

Module licensing

Schools enable the modules they need; the admin console tracks what's licensed where.

Admin console

Districts, schools, users, students, years, branding, and settings managed in one place.

Access & audit

Claims your IT director can interrogate.

School operations software touches student data, so access control is architecture here, not a compliance checkbox. Each line below is how the platform is actually built — bring your technology team and we'll go as deep as they want.

Roles are checked on the server, every request
Authorization lives in the server functions, not the interface. Hiding a button is never the security model.
Permissions can't go stale
Roles are re-read from the database on every request — revoking access takes effect immediately, not at next sign-in.
Every query is scoped to the school
The server derives which school you're operating in and refuses ambiguity. Client-supplied school or role values are never trusted.
“View As” can't change anything
Administrators can see exactly what any staff member sees — for training or debugging — while every write is blocked during impersonation.
Sensitive actions leave a trail
Audit entries record the real actor, the action, and the time — attributed to the person acting, never the person being viewed.
Sign-in without passwords
Google sign-in and emailed magic links. No password table to breach, nothing for staff to reuse or forget.

Student-data paperwork: districts will want a signed data privacy agreement and a written security summary before a pilot touches anything real. That paperwork is in progress — ask where it stands in your demo, and we'll tell you plainly. See also the privacy page.

Student recordIllustrative
MC
M. Chen
Grade 9 · 2027–28 · one record across modules
  • Referral 2027-0398 resolved — resolution shared with counselorOct 8
  • Fine cleared — charger returned at Station BSep 30
  • Cut slip 2027-0311 excused — attendance note attachedSep 22
  • Chromebook CB-1102 assignedSep 3
Demo environment

A complete school you can poke at — with nobody real inside.

The platform ships with a self-contained demo district: realistic, fully anonymized data, isolated from any real school. Demos run there, always. Your walkthrough never touches live student information, and neither do we.

It's also how the record above works: conduct, devices, and coverage writing to one student, one staff member, one year — so the history is a timeline, not an export.

Bring your IT and operations teams.

We're happy to go deep on architecture, access control, and what a rollout actually looks like.