Trust & safety
Serious controls in a teaching environment
Not licensed to hold customer money — safeguards mirror production habits.
Host the API behind HTTPS, pin CORS, rate limit abusive clients, and rotate secrets regularly.
Platform patterns
- Token-backed sessions with revocation on credential changes.
- Dedicated audit logging for user and admin journeys.
- Transactional SQL guarding balance updates.
See our privacy statement for data handling in your deployments.