Security Overview

How Parent Telegram protects school and student data.

Infrastructure

Hosted on AWS (Amplify, RDS PostgreSQL, S3, SES, Cognito)
Encrypted connections (HTTPS/TLS) for all web traffic
School-scoped database tenancy

Access controls

Invitation-only staff accounts with role fixed at invite time
Separate teacher and administrator invite links
Staff sign-in through AWS Cognito
Role-based access: Teacher vs Administrator
Teachers limited to their own student roster
Session-protected routes and APIs

Audit and compliance

Audit log for create, update, view, export, and send actions
Communication history tied to student records
Administrator export of school audit trail
Escalation packets for formal reviews

Authorized use

Parent Telegram is intended for authorized school personnel only. Accounts are created through signed invitation links — teachers cannot elevate themselves to administrator in the app. Use teacher invites for classroom staff and administrator invites for district or school office personnel.