Home › Health & Safety
Most club management tools treat allergies and emergency instructions like any other text field. All Mighty Sync treats them like what they are: sensitive medical data that needs encryption, access control, and an audit trail - not a spreadsheet column.
Every health and safety record is encrypted using pgp_sym_encrypt, with the encryption key held in a dedicated vault - never stored alongside the data it protects.
Encryption alone isn't the whole story. Only authorized users who enter the correct PIN can view or edit a health record, even if they otherwise have access to the student's profile.
Every single access to a health record is logged - who looked at what, and when. Nothing about who has viewed a child's medical information is left to guesswork.
Medical information can be entered before a student's account even exists. It's encrypted the instant it's submitted and automatically carried over the moment registration is completed.
For young children who never register themselves, health data is written atomically at account creation - so there's never a window where the account exists without it.
Data entered at invite time isn't locked in a special state. It's fully editable afterward through the same admin and parent screens used for every other student record.
Teachers and admins get an alert before a class or event if a specific child's medical needs require attention - so it's surfaced automatically, not something someone has to remember to check.
The information a teacher or coach may need to act on quickly.
More sensitive history, restricted to organization admins.
Every health and safety record is encrypted end-to-end using pgp_sym_encrypt with a key stored in a dedicated vault, not alongside the data itself. On top of encryption, access is PIN-gated - only authorized users who enter the correct PIN can view or edit a record - and every access is logged in a full audit trail.
Access is role-based and PIN-gated. Standard fields (allergies, health notes, emergency instructions, medication details) are visible to authorized parents and admins. A smaller set of admin-only fields - blood type, diagnoses, regular medication, and history of fractures, injuries, operations or hospitalizations - is restricted to admins alone.
Yes. Health and safety data can be captured at invite time, before the student account is even created. It's encrypted the moment it's entered and automatically transferred to the student's record once registration is completed - no re-entry required.
For dependent children - typically young kids who never create their own account - health data is written atomically at account creation, alongside the account itself. There's no special-cased behavior afterward: it's fully editable through the same admin and parent screens as any other student record.
Yes. Teachers and admins receive an alert before a class or event if a specific child's medical needs require attention, so nothing depends on someone remembering to check a file in advance.
See how encrypted, PIN-gated health records fit into the rest of your organization's setup - no obligation, no setup required to talk it through.