Security at ClassPulse

All traffic between your browser (or our mobile apps) and ClassPulse is encrypted in transit using TLS. Data stored in our database is encrypted at rest using managed database encryption. There is no unencrypted path to your data.

Payments run through Stripe, a PCI DSS Level 1 certified payment processor. When a parent pays, their card details are entered directly into Stripe-hosted fields — the card number goes to Stripe, not to ClassPulse. ClassPulse never stores or transmits full card numbers, which keeps our PCI compliance scope minimized (SAQ-A style). Each studio operates its own Stripe connected account, so payouts flow directly from Stripe to the studio.

ClassPulse is multi-tenant, but your data isn't mixed into a shared pool. Each studio's data lives in its own isolated PostgreSQL schema — schema-per-tenant isolation — separating one studio's records from every other studio's at the database level, not just in application code. This design reduces the risk that a bug or query in one tenant's context could expose another's data.

Access inside a studio is governed by role-based access control, with built-in owner, admin, instructor, parent, and student roles plus custom granular roles, so each person sees only what their role allows. Accounts support optional two-factor authentication (TOTP), and we recommend enabling it for all staff accounts.

We maintain automated backups of the database so your data can be restored if something goes wrong. We use commercially reasonable efforts to keep the platform available, and scheduled maintenance is performed with minimal disruption in mind.

ClassPulse runs on Google Cloud — the application on Cloud Run and the database on Cloud SQL — inheriting the physical security, network protections, and operational rigor of Google's infrastructure. We do not operate our own data centers.

We believe in being straight with you: ClassPulse does not currently hold SOC 2 or ISO 27001 certification, and we won't claim badges we haven't earned. What we describe on this page is what we actually do. If your studio has specific security questions, email us and we'll answer them directly.

Found a vulnerability? We want to hear about it. Email hello@classpulse.pro with the details and steps to reproduce, and give us a reasonable opportunity to fix the issue before any public disclosure. We take every report seriously and will respond as quickly as we can.