# Harmony security & privacy
> How Harmony protects studio data: per-studio isolation, role-based access, consent-gated support, and audit logging.

## Pillars
- Per-studio isolation — every record is scoped to one studio
- Role-based access for admins, teachers, and students, enforced server-side
- Authenticated sessions with hashed credentials; optional Google sign-in
- Consent-gated, time-boxed platform support access with a visible audit log

## FAQ
### Can one studio see another studio's data?

No. Every record is scoped to one studio, and queries are filtered by studio on every request. Multi-studio users switch context; data never crosses studios.

### How does platform support access a studio?

Only with a consent-gated, time-boxed support grant from the studio. Every support visit is audited and visible to the studio — support cannot browse tenant data by default.

### Is two-factor authentication required?

Yes for studio admins (email OTP or authenticator app). Teachers may opt in. Students sign in with email and password (or Google when configured).

HTML: https://harmonyscheduling.com/security · Privacy: https://harmonyscheduling.com/privacy