coord.
§ · The imprint

The imprint.

What Coord holds, where it is, who can see it, and what we will not claim. Written for the coordinator who has to answer for it, and for the privacy officer who will ask.

Privacy statementSecurity practicesAccessibility statement
A library shelf of books in low afternoon sunlight, in ink duotone.
Fig. 1Shelves, late afternoon; the reading room keeps its own hours.

The imprint, section by section

What we hold

Student number, name, enrolment status, group, marks, and the exceptions the coordinator records. Optionally, if the coordinator imports them: email and mobile (encrypted), an international-student flag, and an access-plan type such as extra time or an alternative format.

Never: a diagnosis, Indigenous status, agent details, or a password of any kind. This is a design decision, not a setting.12

Where it is

Cloudflare Workers, D1, R2 and Durable Objects. Primary stores are placed in Cloudflare's Oceania region using location hints. Cloudflare does not offer an Australian jurisdictional restriction for D1 or KV today, so we do not claim that every replica, backup or log stays in Australia.3

Data minimisation is the privacy strategy, not a region setting: what leaves the country is, as far as we can make it, not personal information at all.1

Who can see it

Seeing student personal information is a permission, not a role. Markers, moderators and external guests work with pseudonyms and never see it. Guest access is time-boxed. Every change is written to an audit log your organisation can export.4

How you sign in

A link and a six-digit code, sent to your email address or Australian mobile. No passwords, no password database, no single sign-on with your university. Codes expire after ten minutes and five attempts; sessions can be revoked from Settings.4

Leaving

A full export (JSON, CSV and files) at any time, without asking. Deletion runs as a job that also clears files and search indexes, and produces a receipt. Retention defaults to purging student personal information twelve months after the offering ends; your organisation sets its own policy.4

Provisional, always

Coord complements and never replaces the university's curriculum system, LMS, student system or payroll. Every mark it emits is provisional until the system of record publishes it, and every hour estimate is labelled estimate, not payable.5

Accessibility

WCAG 2.2 AA is the target for the app, this site and every exported artefact, because the coordinator's own students will read the outline and the rubric. The conformance statement is on the accessibility page.6

For your privacy office

A privacy impact assessment pack (data-flow diagram, data inventory, retention schedule, sub-processor list) is included with School and University plans and can be requested from hello@coord.tools without talking to anyone in sales.7

Sub-processors: Cloudflare (hosting, storage, email delivery, AI inference), Twilio (SMS only), Stripe (billing only). No analytics or advertising services run on the site or in the app.8

Incidents

We treat a data breach as notifiable under the Privacy Act and the state schemes that bind universities, and we would tell affected organisations first and promptly. The education sector lodged 81 notifiable breaches in 2025.9 Report a vulnerability to security@coord.tools.

Notes

  1. Assessment, monitoring of student subgroups and international-student obligations under the Threshold Standards and the ESOS National Code; sensitive information under state and federal privacy law; adjustments recorded by type, never by condition. Higher Education Standards Framework (Threshold Standards) 2021; ESOS Act 2000 and National Code 2018; Privacy Act 1988 and state information privacy principles.
  2. Indigenous status is sensitive information; a teaching tool should not store it. Referral to the university's Indigenous education unit is the right action, not a flag in a third-party database. Maiam nayri Wingara Indigenous data sovereignty principles (2018); Victorian Information Privacy Principle 10.
  3. Cloudflare's documentation states that D1 “Jurisdictional Restrictions (data location / storage) options are not supported today” and likewise for Workers KV; R2 and Durable Objects support jurisdictions for the EU and FedRAMP, not Australia; location hints influence placement but are not a residency guarantee. Cloudflare, Data Localization Suite compatibility documentation.
  4. Sign-in is a link and a six-digit code, no passwords; student email, phone and notes are encrypted at rest with an organisation-scoped key; every change is audited; full export at any time; deletion runs as a job and produces a receipt; default retention purges student personal information twelve months after the offering ends. As built; see Security and Privacy.
  5. Coord complements and never replaces the university's curriculum system, LMS, student system or payroll. Every mark it emits is provisional until the system of record publishes it. Product statement; Coord product requirements §1.
  6. The Higher Education Standards Framework references the Web Content Accessibility Guidelines; university procurement commonly asks for a WCAG 2.1 or 2.2 AA conformance statement. Higher Education Standards Framework (Threshold Standards) 2021, Domain 7; Disability Discrimination Act 1992, s 24.
  7. The PIA pack and its contents are part of the School and University plans. See Pricing.
  8. Everything runs on Cloudflare; Twilio is the only external service and is used for SMS; Stripe handles card payments. Coord architecture decisions #2, #10, #14.
  9. The education sector lodged 81 notifiable data breaches in 2025; total notifications reached 1,205. Office of the Australian Information Commissioner, Notifiable Data Breaches report, 2025.