Security and school records

Questions to discuss before sharing school records

A school needs to know who can see information and what will happen to its records. Here is what we can explain now and what still needs to be agreed before a pilot.

Who can see an athlete’s information?

Access depends on school membership, staff assignments, and confirmed family connections. Coaches and PE teachers see the participation instructions they need for the athletes they work with. Coaches do not receive document-review access.

How do families get access?

With SidelineWorks-Complete, a family can join through a school invitation or ask the school for access. A parent or guardian can see their child’s information after the school confirms the connection.

Who checks a submitted form?

SidelineWorks-Complete reads what it can from an uploaded form. Authorized school staff compare the details with the original, correct anything missed, and confirm the requirement. The form is not accepted simply because information was read from it.

Can we download our records?

Downloads are still being worked on. Before a pilot, we’ll confirm which record categories can be downloaded, the formats, and who can download them with your school.

What if our school leaves?

Before your school provides records, we’ll work with you on an agreement covering the time available to retrieve records, when access ends, and when remaining stored copies are deleted.

For school IT

What your IT team can review

Some operating details must be settled before we accept school records. These are the questions we will cover together.

Pre-pilot information · Original public information reviewed October 7, 2026

Storage and processing

The current application supports local file storage and a separate service for reading documents. The pilot’s hosting and processing locations and any additional storage providers still need to be confirmed. This page does not offer a choice of local or cloud hosting.

Access

School membership, staff assignments, and confirmed family connections control access. Athlete-related conversations are available to the school’s athletic trainers; separate staff conversations have their own participants. Support access and its operating procedures belong in the school’s IT review.

Encryption and privileged access

Public sites use HTTPS through Cloudflare for information in transit. The pilot review must confirm encryption of stored files and backups, and how privileged access is managed.

Retention and deletion

The agreement must cover retention periods, deletion, and any holds for temporary submissions, extra pages, accepted forms, acknowledgments, participation history, and backups. A form’s expiration date is not its deletion date.

Backups and recovery

Backup frequency, separation, retention, and a tested restore procedure are part of the pre-pilot review. Recovery-time commitments have not yet been established and tested.

Service providers

Cloudflare serves the public sites and Postmark delivers transactional email, including contact messages. Before a school provides records, the IT review must identify every provider receiving school information, why, and the applicable retention terms.

See the public-site privacy notice and website and demo terms.