Security Center
Protect content, data and operations.
Security is part of enterprise readiness. HMG v9 documents controls for a free-tool architecture.
Security controls
Supabase Auth
Use strong admin accounts. Disable unknown users.
Row Level Security
Restrict student, parent, tutor and school data by role.
Backups
Export CMS JSON and platform data regularly.
Data minimization
Do not store sensitive student data in public CMS pages.
Access matrix
Role
CMS
Students
Courses
Finance
Reports
Super Admin
All
All
All
All
All
School Admin
School pages
School only
School only
Limited
School only
Tutor
No
Assigned
Assigned
No
Assigned
Parent
No
Linked child
View
Own invoices
Linked child