What does SchoolTherapy cost?
SchoolTherapy costs $990 (plus GST) per year, and includes unlimited phone and email support. There are no other charges, and no limits on the number of administrators or providers you set up.
We issue invoices for 12 month's subscription, which can be paid by bank transfer or card.
Can I try it without a credit card?
Yes! Just sign up for a free trial, and seconds later a temporary password for your new account will arrive on your mobile phone. You can then log in and explore how SchoolTherapy works.
Your new account is fully functional with no limitations, except that it expires after fourteen days. If you like what you see, simply click the payment link and set up your credit card. Or if you decide SchoolTherapy isn't right for your school, contact us and we'll cancel your account without any fuss.
Is our information safe?
Your information is as safe as we can make it. We have submitted SchoolTherapy for Safer Technology 4 Schools (ST4S) accreditation, and have commissioned a third party penetration test conforming to OWASP and NIST security testing standards.
Our development team has more than 20 years of experience in building secure web services, and we are continually upgrading our systems in line with industry best practices.
For example, SchoolTherapy already supports passkeys. Passkeys are a new way of logging in that prevents password reuse, weak passwords, phishing, keyloggers and spyware.
SchoolTherapy's data is encrypted in transit and at rest, and held in a secure datacenter in New South Wales, Australia.
And our focus on saftey extends to privacy too. Unlike many online services, we believe your data is your property - not ours. We do not use it (except to provide the service to you), sell it or give it to anyone else. See our privacy policy for more details.
How does digital signing work?
Signing a SchoolTherapy declaration involves entering your full name in an online form. Once signed, we create a PDF containing the declaration text and a signing block containing your name, the time you signed it, your email address and the IP address you signed it from. We also calculate a cryptographic hash containing all that information, sign it with our secret certificate, and embed the hash in the PDF metadata. We then email a copy of the signed PDF to the signatory.
It is possible to edit PDF documents, but it is cryptographically impossible to regenerate the embedded hash without our secret certificate. Our integrity certification page allows anyone to check if a declaration's embedded hash is correct, guaranteeing that it has not been tampered with.
Just like paper declarations, someone else could forge a signature. But unlike paper declarations, the real signatory would find out immediately when the emailed copy arrives. And anyone attempting to argue that they didn't sign a declaration would have to explain why they didn't raise the alarm when a declaration signed by them turned up in their inbox.