Dual-run crisis detection
Crisis signals are checked twice — in the student's app as they type and again on the server at submit. The server has the final word and can only ever upgrade a request to crisis, never downgrade, deliberately biased toward over-flagging. The trigger baseline is platform-controlled and add-only: it can be extended, never weakened or switched off by a local setting.
Policy mapping
The written standard this control enforces:
Need the detail behind this page?
Request access and we can share the full policy set, assessment reports, and completed questionnaires under NDA — or answer your security questionnaire directly.