RO
Least privilege
Connections receive only the permissions needed for the defined work.
Security
Access should match the job—and no more.
Rollbook separates read-only reporting work from controlled changes, keeps institutional connections revocable, and makes approval part of any write workflow.
KEY
Revocable credentials
Your institution can rotate or revoke the source-system credential.
✓
Approval gates
Write work does not proceed without a preview and explicit institutional approval.
LOG
Traceability
Definitions, report versions, approvals, and exceptions remain visible.
Lifecycle
Know what is connected,
kept, and removed.
School-specific environment
Institutional data is separated by school and handled only for the contracted service.
Encrypted transit and storage
Connections and stored reporting data use standard encryption controls.
Retention by purpose
One-time work and subscriptions have documented retention expectations before access is granted.
Defined exit
On completion or termination, access is revoked and data disposition is confirmed according to the agreement.
Procurement ready: request the current security summary, data-processing terms, subprocessor information, and insurance documentation during contracting.
Have a security questionnaire?
Send it with the proposed scope so technical and contractual review happen together.