Security
Security designed for institutional trust
Role-based access, optional MFA, audit visibility, and API protections — built for institutional review and safe production operations.
Controls that match how schools work
Every role sees only what they should. Schools stay separated. Critical actions leave an audit trail. Optional MFA strengthens account access when your policy requires it.
Four pillars of platform security
Access, audit, data handling, and operational reliability work together.
Access control
- Role-based permissions across major workflows
- Scoped dashboards and actions per role
- Optional multi-factor authentication (authenticator apps and backup codes)
- Configurable lockout after failed sign-in attempts
Auditability
- Activity and audit logs for administrative actions
- Traceable user and system events
- Operational visibility for leadership and platform teams
Data handling
- Secure token-based authentication for API access
- Secrets managed through environment configuration
- School-scoped tenancy to keep institutional data separated
Operational reliability
- Separate app and API deployment tiers
- API rate limiting, with stricter limits on auth routes
- Fits your own monitoring, alerting, and incident processes
Institution confidence checklist
- Role-scoped access and authorization
- Optional MFA for user accounts
- Audit tracking for critical actions
- Environment-aware security settings
- Token-based API authentication
- Rate limiting on API and auth routes
- School-scoped data tenancy
- Deployment separation for app and API tiers
Single sign-on
Sign-in uses email and password with optional MFA. SAML/OIDC SSO is not included in the standard product today. If your security policy requires IdP-based SSO, contact us to discuss requirements and roadmap.
Defense in depth
Monara combines environment controls, role enforcement, authentication protections, and audit visibility. Your hosting choices — TLS, network policy, backups — remain part of your institution's security posture.