# MetaPet Schools Security Controls Summary

## Current controls

- Alias-based classroom setup instead of student accounts
- Local device storage for routine classroom use
- School-only route allowlist
- Teacher deletion controls for local school data
- Short retention expectation for pilot data

## Current non-goals

- No public social features
- No student login recovery flow
- No open chat
- No hidden adtech or upsell prompts in the school runtime

## Review tasks before pilot

- Confirm the actual hosting environment
- Confirm the school route allowlist in the deployment
- Confirm local deletion controls
- Confirm exported evidence stays teacher-controlled