Security and data handling
How your families' records are handled
In plain language, without badges. Everything here describes ChildCareOS as it exists today, and where an assurance does not exist it is named rather than implied.
What is true today
Your center's data stays your center's
Records belong to your center and are only visible to accounts at your center.
ChildCareOS serves many centers from one hosted system, and the separation between centers is enforced by the system itself rather than by anyone remembering to be careful. No account at another center can see your families, your staff, or your records.
A record of every important change
Attendance, billing, exports, and consent changes are logged, so you can always show who did what and when.
When a licensor or a parent asks what happened, the history is there: check-ins, edits, exports, and sign-offs each keep a record of who acted and when, and that history cannot be quietly rewritten.
People only see what their role allows
Administrators, staff, and parents each get their own view, and the check-in kiosk can only check people in and out.
A parent sees their own children. Staff see their classroom work. Only administrators reach billing, records, and settings. These limits are enforced by the system itself, not by hiding buttons on a page.
Encrypted in transit
Traffic between your devices and ChildCareOS is encrypted in transit.
Whether it is a parent's phone, a classroom tablet, or the front-desk kiosk, the connection to ChildCareOS is encrypted on its way across the internet.
Automatic backups
Backups of your center's data run automatically on a schedule.
Backups are taken regularly without anyone at your center having to remember to run them.
Passwords and PINs cannot be read back
They are stored in a protected form that no one, including us, can turn back into the original.
A password or kiosk PIN is never kept in a readable form. Repeated wrong guesses at the kiosk lock that device out, so a tablet by the front door cannot be used to guess codes.
No data sale, no advertising, no trackers
Nothing about your families is sold or shared for marketing, and there are no third-party trackers on any page.
There is no advertising, no analytics tracker, and no marketing data sharing anywhere in ChildCareOS. Your families' information is used to run your center and for nothing else.
Retention periods you control
How long each kind of record is kept is set by your administrator to match your license.
Minnesota tells a licensed center how long it must keep different kinds of records. You set those periods per record type, so the configuration matches your license rather than a default picked for every state at once.
What we do not claim
A security page that lists only good news tells you nothing. None of the items below is true of ChildCareOS today, so none of them appears anywhere else on this site.
No SOC 2 attestation
ChildCareOS has no SOC 2 report of any type, and no auditor has been engaged to produce one.
If your board or your insurer requires one, ChildCareOS does not meet that requirement today.
No third-party security testing
No external firm has performed a penetration test or a security assessment against ChildCareOS.
If your evaluation requires one, that has not happened yet and is not implied anywhere on this site.
No encryption of the individual records themselves
The records themselves are not individually encrypted by the application, and no claim of encryption at rest is made for them.
If what your license, your insurer, or your board specifically requires is encryption of the records themselves, ChildCareOS does not meet that requirement today.
No promise on how fast, or how little, a recovery would lose
ChildCareOS makes no commitment about how quickly service would be restored after a failure, or how much recent work a recovery could lose.
Backups run on a schedule, but those two numbers are not something we promise today.
No uptime figure or service-level agreement
We publish no availability percentage, no service-level agreement, and no status page.
If your center needs a contractual guarantee of availability, ChildCareOS does not offer one.
What governs your records
Minnesota licensing rules set what a center must record, how long it must keep it, and what it must be able to produce on request. ChildCareOS is built to produce those records: the attendance record naming the adult who signed, the ratio log, the incident file, and the searchable history behind them.
Still evaluating
A trial runs for 30 days with no card, which is also the most direct way to see everything above for yourself.