Organization-level separation
Each daycare works in its own organization profile. Staff-facing records and management pages are scoped to the signed-in provider.
Protected access
Riyela uses Django authentication, secure sessions, CSRF protection, and role-aware access checks throughout the management application.
Safer PIN workflows
Parent and employee PINs are handled through dedicated flows. Employee clock PINs are stored using password hashing rather than plain text.
Operational safeguards
Rate limiting, honeypot fields, reCAPTCHA protection, audit logging, and controlled document downloads help reduce common abuse paths.
Security is a shared responsibility. Center owners should use strong passwords, limit staff access appropriately, and review records regularly.