Skip to content
Stafflo.ai
Buy an audit
Stafflo.ai
Education

Guardian Consent Desk

Records a parent's consent for each use of a student's data, and when consent is withdrawn, deletes the student from every connected system and issues a signed certificate.

The students

500 synthetic students, each with a guardian check and a consent for each use

Guardian Consent Desk's Students screen on a wide screen: a dark top bar with Demo Academy and a Synthetic data badge, a sidebar with five sections, four figures (500 students, 100 guardians checked, 30 waiting for a guardian, 0 withdrawals open) and a table of students with each parent or guardian, the guardian check and a status for each of four uses.The real screen, on synthetic data
500 synthetic students, each with a guardian check

Demo built on synthetic data.

1 of 5: The students

The problem

Consent sits on paper forms and in five tools that don't talk to each other. When a parent asks you to delete their child's data, the LMS forgets them, the marketing list doesn't, and you can't show what happened.

What it does

Guardian's numberStudent's own numberMessagesDemo Academy482 913Consent linkSend a codeRefusedNo code sentNothing signedCode sentVerification stops it

It verifies the parent or guardian before a student under 18 is enrolled into anything that uses their data.

Consent recordDeependra, under 18Guardian checkedLearning analyticsNotice v1, 4 July 2026GivenCommunicationsNotice v1, 4 July 2026GivenPhotosNotice v1, 9 October 2026WithdrawnAppend-only: entries are added, never changed

It records consent per purpose — learning analytics, communications, photos — with the exact notice the parent saw.

WithdrawalDeependraBy the guardian4 of 4 confirmedAdmissions CRMWaitingConfirmedLearning platformWaitingConfirmedMarketing toolWaitingConfirmedOpen, asked againAnalytics warehouseWaitingConfirmedCertificateSigned

On withdrawal, it deletes from every connected system and shows each one's confirmation.

Deletion certificateDemo AcademySigned by the institutePublic check pageCheck a certificateSignature validAnyone can check it

It issues a signed certificate anyone can check.

Leftover scanFound in Analytics warehouseABCRecordStudentKept since2345WH-DEMO-0412DeependraJuly 2026WH-DEMO-0419DeependraJuly 2026EventsScoresAttendance

It scans for data left behind after a deletion.

Try to break it

On the call we'll trigger these, live:

  • The marketing tool doesn't confirm a deletion. It stays open on the list and isn't counted as done.
  • A student opens the consent link instead of the parent. Verification stops it.
  • Old records turn up in the analytics database. The scan finds them.
WithdrawalDeependraBy the guardian4 of 4 confirmedAdmissions CRMWaitingConfirmedLearning platformWaitingConfirmedMarketing toolWaitingConfirmedOpen, asked againAnalytics warehouseWaitingConfirmedCertificateSigned

Where it runs

Your own cloud account or a server on campus.

Who else does something like this

SuperAwesome Kids Web Services provides verifiable parental consent for apps and games used by children.

The Consent Desk is built for Indian institutes under the DPDP Act, and it proves deletion across your own systems.

The rules it respects

Built for the DPDP Act 2023 and Rules 2025 — verifiable parental consent for anyone under 18.

What our tests measured

How we test
Withdrawals deleted from all four systems when none fails100%
Deletions reported complete while a system was open0
Seeded leftover records found100%
Student self-consent attempts blocked100%
Average time to delete, in simulated systems156.46 ms
Slowest 5% of deletions took, in simulated systems322 ms
  • Run on 4 October 2026
  • Model: none (deterministic)
  • 500 examples
For your engineers
Engines
Consent Spine, Proof Console
Sealed mode
Test passed: with sealed mode on, it refuses every outbound connection except to the model you've approved.

Data flow

A school's records (synthetic)Parent or guardianon a phoneStudent opens the linkown number refusedGuardian checkcode to the guardian's numberConsent ledgerappend-only, notice readWithdrawalacross four systemsCertificatesigned, JSON and PDFPublic check pageaudit_logappend-onlyLeftover scanConnected systems, simulatedAdmissions CRMLearning platformMarketing toolmisses its first confirmationAnalytics warehouse
See the Consent Desk on a callStart with a pilot