Public institutional pages, civic catalog discovery, filters, portal previews, responsive navigation, and external resource pathways.
USU ONLINE SCHOOL · IMPLEMENTATION AND TRUST
The operating architecture behind the learning experience.
This living implementation inventory distinguishes the public experience already available from secure services that require staffing, policy, licensing, identity, data, and operational configuration.
SERVICE STATUS
Role dashboards, family collaboration, learning sequences, research journeys, and activity entry points using synthetic information.
School identity, enrollment, official records, protected workbooks, messages, live classes, payments, storage, notifications, and vendor integrations.
Advanced simulations, AI study support, analytics, research publication, microgrants, equipment workflows, and cross-institute reuse.
ROLE AND PERMISSION MATRIX
Access follows purpose, relationship, and record category.
| Record | Student | Guardian | Family workspace | Educator | Administration |
|---|---|---|---|---|---|
| Academic learning | Own record | Authorized child | Explicitly shared | Assigned learners | Audited oversight |
| Private reflection | Own record | No automatic access | Only when shared | Only when shared | Restricted |
| Attendance & grades | Own record | If authorized | Approved outcome only | Assigned learners | Registrar roles |
| Family workspace | Shared items | Authorized household | Shared items | Conference context | Restricted support |
| Financial records | None | Separate authority | None | None | Finance roles |
| Safeguarding records | As policy permits | As policy permits | Never shared | Named responders | Audited restricted roles |
SYSTEM OF RECORD AND INTEGRATIONS
One accountable owner for every class of information.
| Function | Primary component to evaluate | Authoritative records | Status |
|---|---|---|---|
| Identity | Managed identity provider | People, roles, verification, sessions, MFA, passkeys, SSO | Awaiting selection |
| Learning | Moodle or Canvas with H5P | Courses, assignments, assessments, grades, learning activity | Evaluation required |
| School records | Student information system | Admissions, enrollment, attendance, transcripts, consent | Procurement required |
| Application data | Managed PostgreSQL | Family permissions, workbooks, appointments, plans, workflows | Architecture ready |
| Media & live learning | Managed video + BigBlueButton or approved service | Video, captions, recordings, classrooms, tutoring | Licensing required |
| Community | LMS discussion or moderated community service | Forums, clubs, parent community, moderation, retention | Safeguarding review |
| Payments | Hosted checkout provider | Transactions and receipts; payment details remain with provider | Optional configuration |
| Support & operations | Help desk, monitoring, incident management | Tickets, devices, incidents, backups, recovery | Operations setup |
Supported LTI and OneRoster connections are preferred where suitable. Every integration requires documented synchronization, retry, conflict handling, export, accessibility, child-use eligibility, licensing, and data terms.
CORE DATA MODEL
Portable records with deliberate separation.
- People and multi-role identities
- Family memberships and verified guardian permissions
- Institutions, courses, sections, and enrollments
- Modules, lessons, resources, activities, and licenses
- Submissions, assessments, grades, attendance, and appeals
- Workbooks, versions, portfolios, simulations, and research projects
- Messages, appointments, forms, consent, and notification delivery
- Emergency plans, continuity records, support tickets, and financial references
ACCOUNTABLE PEOPLE
Technology operates within a staffed institution.
- School leadership and institutional oversight
- Curriculum, teaching, assessment, and registrar services
- Family engagement, learner support, accessibility, and safeguarding
- Library stewardship, Heartwork review, and emergency-content review
- Identity, security, privacy, IT support, and continuity
- Vendor management, finance, communications, moderation, and data governance
SECURITY AND RELIABILITY
Protected by design.
Encryption, least privilege, audit logs, upload scanning, input validation, rate limits, cross-family isolation testing, backups, restoration drills, monitored queues, incident response, release controls, migrations, and rollback procedures.
PRIVACY AND CHILD PROTECTION
Rights made visible.
Plain-language notices, verified relationships, consent records, access and correction workflows, controlled exports, retention rules, shared-device protection, safeguarding procedures, trained responders, and qualified FERPA and COPPA review.
ACCESSIBILITY
Core pathways for every learner.
WCAG 2.2 AA direction, keyboard and screen-reader use, visible focus, captions, transcripts, accessible equations and exports, reduced motion, multilingual review, lower-bandwidth delivery, and equivalent alternatives.
COST MODEL
Fund the full operating system.
Licenses, hosting, storage, video delivery, AI usage, communications, support, accessibility, security, staffing, moderation, training, equipment, content review, backups, and continuous maintenance.
PRIORITIZED DELIVERY
- 01
Core portals and learning
Identity, enrollment, course delivery, library, accessibility, safeguarding, emergency essentials, and operational ownership.
- 02
Family collaboration and support
Verified guardians, permissions, shared workspaces, conferences, accommodations, tutoring, and continuity.
- 03
Expanded libraries and simulations
Catalog stewardship, workbooks, video, licensed tools, laboratories, research studios, and printable alternatives.
- 04
Advanced automation and analytics
Permission-aware search, transparent dashboards, integration queues, and responsible AI learning assistance.
Acceptance is demonstrated through complete journeys.
Enroll a learner → verify and link a guardian → complete a module → submit work → receive teacher feedback → share only the permitted outcome in the Family Portal.
Release verification includes multiple children and guardians, revoked access, restricted records, login recovery, direct-link controls, persistence, moderation, failed notifications, accessible navigation, offline continuity, backup restoration, and human review.