Security & AI
Adaptr is built for schools that need adaptive learning without losing control. Here is how we handle AI, student data, and teacher oversight.
How Adaptr uses AI
AI assists your workflow — it does not run your classroom. You stay the decision-maker at every step that affects students.
Teacher in the loop
The AI tutor never answers students directly. Every question enters your review queue first — you choose, edit, or write the response before anything is sent.
Full visibility
See what students ask, how they progress on the concept graph, and where mastery drops. Attention alerts flag patterns that need a human check.
Minimal student data
Students join with a class code and personal PIN — no email required. Rosters stay under your control; you decide what names and identifiers to store.
AI with guardrails
Document extraction proposes concept graphs for your review — nothing goes live until you validate it. Distress signals in tutor questions are flagged for immediate follow-up.
What AI does
- Proposing concept nodes and prerequisites from your uploaded teaching documents.
- Generating tutor answer drafts for you to approve, edit, or replace.
- Drafting parent report language from mastery and activity you already see in Adaptr.
- Checking open-ended quiz responses where auto-grading is not possible.
What AI does not do
- Contacting students or parents without your explicit action.
- Activating a concept graph or quiz without teacher confirmation.
- Training on your class content for other schools (your materials stay scoped to your account).
- Replacing your professional judgment on grades, reports, or safeguarding decisions.
Data & security practices
Account and class data are stored in Supabase with row-level access controls. Teacher actions use authenticated sessions; student sessions use signed cookies scoped to one class at a time.
Public endpoints that accept join codes or PINs are rate-limited. In production, limits are enforced with Redis so brute-force attempts cannot scale across server instances.
Payment data is handled by Stripe — Adaptr does not store card numbers. Email delivery for parent reports and contact inquiries uses Resend with configurable sender addresses.