Safeguarding & Pastoral
A confidential case desk for the safeguarding lead — sealed records, a readership trail, handled with gravity.
- Safeguarding leads
- Counsellors
- Head teachers
Case #SG-204
SealedEncrypted to the safeguarding lead
Opens only with the DSL’s key
What it does
Some records only the right person should ever open.
Sealed disclosures
A disclosure is encrypted to the safeguarding lead’s key — even IT and platform staff cannot read it.
Readership audit
Every time a case is opened, a read record is written — proof, after the fact, that it was handled with care.
Separation of concerns
Pastoral escalation stays distinct from child-protection disclosure, so the sensitive channel is never diluted.
Anonymity preserved
A child can disclose without their identity being exposed to the wider system, by design.
Why it’s different
Only the right person’s key opens it.
Child-protection records demand more than a permissions flag. Disclosures are cryptographically sealed to the safeguarding lead’s role-key, and every read is logged to a tamper-evident trail — a confidentiality moat that meets the bar these records actually require.
A cryptographic confidentiality moat that meets the bar for child-protection records.
Sealed disclosure
encrypted at rest
DSL’s key
the only key that opens it
Not even IT or platform staff hold the key. Every open is written to a read trail.
Readership trail
Case #SG-204 · signed
Every open is recorded — the proof, after the fact, that it was handled with care.
The artifact
Who opened it, and when.
The readership trail is the proof of care: a signed record of every access to a sealed case. Handled with gravity, not drama.
See the safeguarding desk in a walkthrough.
See safeguarding on your own school’s data in a guided pilot — import, training and a full term of support included.