Updated 14 days ago
Start Here: Product & Engineering#
Welcome. You build and ship the platform — student-facing features, internal tools, integrations, and everything in between. This page maps you to the SpringBoard pages that matter most for your work, so you can answer questions like "What standards apply to student-facing features?" and "When does this need pen testing?" without searching.
Your Build Path#
Take the Intake Quiz
Answer 5 questions to classify your project and get the right build path.
Orange Build Guide
Most platform features land here — partner integrations, new user-facing screens, API work.
Red Build Guide
Student-facing AI features, anything touching under-18 data at scale.
Standards You Must Know#
🛡️ Security Standards
Pen test triggers, access controls, secret management, and API security requirements.
🧒 Safeguarding & Under-18s
Mandatory for any feature students interact with — age-gating, content moderation, parental consent.
📊 Data Workflows
PII classification, data warehouse requirements, retention rules, and GDPR obligations.
🤖 Prompt Management
AI testing standards, prompt injection prevention, and output guardrails.
Process & Templates#
📋 Review Request
Submit your project for architecture or security review before launch.
🚨 Incident Report
If something goes wrong in production — log it here immediately.
📞 When to Escalate
Not sure who to ask? This page maps common situations to escalation paths.
Common Scenarios#
Red path. This requires a safeguarding review, AI testing (prompt injection, output safety), and a pen test. Start with the Intake Quiz and expect a full review cycle. Budget extra time — this is the highest-scrutiny path for good reason.
Orange path minimum. Check Security Standards for API requirements (auth, rate limiting, data in transit) and file a Review Request before going live. If the API handles student PII, this may escalate to Red.
Green or Yellow depending on data sensitivity. If you are querying anonymised or aggregate data, Green is fine. If the tool accesses student PII or partner data, check Data Workflows for classification — you may need Yellow or Orange controls.
Was this page helpful?