{ "schemaVersion": 1, "document": "Japanily school review preparation", "reviewedOn": "2026-10-04", "release": "8e4d020c2f58f835d7860c503bf2066e5d7d9593", "schoolProductionApproved": false, "limitation": "Public preparation snapshot, not a contract, audit opinion, approval record or live service-health result. Confirm current evidence with the service owner before rollout.", "controls": [ { "title": "Private classroom access", "detail": "Approved teacher roles, class ownership and learner membership constrain classroom records. Explicitly authorised observation reviewers receive only the scoped review material." }, { "title": "Practice and assessment boundaries", "detail": "Server-validated practice results, private attempt history and teacher observations support feedback. Completion, supported practice and learner self-report are distinct; none alone proves mastery." }, { "title": "Data choices", "detail": "Account export, reviewed single-learner report preparation, deletion requests and guarded operator workflows are implemented. Export limits, school retention decisions and operator fulfilment still apply." }, { "title": "Shared-device controls", "detail": "Shared/personal cookie choices, current/all-device sign-out and selective cross-tab recovery cleanup are implemented. Browser restoration and already issued access tokens have limits: sign out and follow school device-clearing instructions." }, { "title": "Temporary guest quizzes", "detail": "Separate untimed quizzes use private invitations, generated labels, teacher admission and one-hour room access. No learner Auth accounts, private classroom access or permanent rewards. Host end deletes room data; hourly expiry cleanup can be delayed by service outages. Genuine school/device acceptance remains required." }, { "title": "Public versus private content", "detail": "Public news, polls, quizzes and reviewed learning previews sit outside the private classroom. There is no public student directory or direct messaging. Reader submissions enter a moderation queue; submission does not publish them." }, { "title": "Release checks", "detail": "Build, database replay, isolation, browser, accessibility and hosted checks gate releases. Automated checks are not an independent penetration test, accessibility certification or school approval." } ], "gates": [ { "id": "identity", "title": "School identity and sign-in", "owner": "School ICT and service owner", "evidence": "Choose permitted accounts, teacher verification, learner recovery and retention. Supply approved provider configuration and witness real allowed/denied sign-in, recovery and shared-device tests.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "auth-hardening", "title": "Hosted authentication protection", "owner": "Service owner and school ICT", "evidence": "Confirm password rules, breached-password protection, abuse controls, rate limits, administrator MFA and the selected plan. Do not treat a client password field as proof of hosted policy.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "backup", "title": "Backup and witnessed restore", "owner": "Service owner and independent witness", "evidence": "Approve backup/PITR coverage and retention, an isolated restore target, recovery objectives and a witnessed drill. Migration replay alone does not recover production data.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "retention", "title": "Retention and deletion operations", "owner": "School privacy lead and service operator", "evidence": "Approve record-specific periods, deletion exceptions and operator authority. Schedule and witness the approved cleanup; test account export and deletion without real student test data.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "privacy", "title": "Privacy, school terms and subprocessors", "owner": "School procurement and qualified privacy/legal reviewers", "evidence": "Review notices, child-facing explanations, school agreement and processor terms; confirm actual provider locations, logs, cross-border processing and contractual obligations. No legal approval is recorded here.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "security", "title": "Independent security and release review", "owner": "Qualified security reviewer and service owner", "evidence": "Review current advisor findings, privileged endpoints, tenant isolation, secrets, branch/release controls and dependencies. Supply authorised penetration-test scope, findings and verified remediation.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "accessibility", "title": "Independent accessibility acceptance", "owner": "Accessibility reviewer and school inclusion lead", "evidence": "Test assistive technology, keyboard, zoom, touch, forced colours, timing and alternatives with representative learners/devices. Automated axe results are supporting evidence, not certification.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "curriculum", "title": "Qualified curriculum and Japanese review", "owner": "Qualified educators and Japanese-language reviewers", "evidence": "Review exact versions of both sequences for language, culture, age, alignment, assessment and differentiation. All 120 units / 600 lessons remain drafts until genuine scoped review evidence supports a different state.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "media", "title": "Authorised professional media", "owner": "Rights holder, language reviewer and service owner", "evidence": "Supply genuine recordings, contributor consent/licences, transcripts/captions and qualified reviews. Production briefs and browser speech are not professionally reviewed recordings; the real asset ledger is currently empty.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "assessment", "title": "Assessment and family-report acceptance", "owner": "School assessment and privacy leads", "evidence": "Validate draft rubrics, moderation, interpretation of attempts and support, accessible family reports and approved recipient channels. Select any external integration before credentials or data sharing are introduced.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "operations", "title": "Named support and incident ownership", "owner": "Service owner and school contact", "evidence": "Name responsible people, escalation contacts, support hours and cover arrangements. Exercise the incident plan; public response targets are not a contracted SLA.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "pilot", "title": "Authorised real-school pilot", "owner": "School ICT, teachers and inclusion lead", "evidence": "After entry approvals, witness classroom use on the actual school Wi-Fi and managed device mix. Test joins, live reconnects, learning, reports and accessible alternatives. Synthetic load tests do not replace this.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "commercial", "title": "Commercial and procurement decisions", "owner": "Service owner and school procurement", "evidence": "Approve prices, trial conditions, invoices, service terms and payment provider before live charging. Record genuine pilot outcomes and permissions before publishing customer claims or case studies.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" }, { "id": "launch", "title": "Cohort launch authorisation", "owner": "Authorised school decision-maker and service owner", "evidence": "Review all evidence, unresolved conditions, scope, named owners and dates. Sign the actual rollout decision outside this checklist; downloading or filling a worksheet grants no access or approval.", "status": "not_evidenced", "decision": "", "reviewer": "", "reviewedOn": "", "evidenceReference": "", "conditions": "" } ], "links": [ "https://japanily.com/schools", "https://japanily.com/privacy", "https://japanily.com/safety", "https://japanily.com/accessibility", "https://japanily.com/terms", "https://japanily.com/support", "https://japanily.com/student-access", "https://japanily.com/api/health" ] }