Compliance & Safety

What administrators ask us first, and our answers

Money flow, student data, audit trails, and who can press which buttons: the six questions every administrator wants answered.

When a school gets serious about RallyOrder, the conversation moves from the advisor to the administration, and the questions change. The advisor asks what it teaches. The administrator asks who’s liable.

Good. Those are the right questions to ask anyone who wants to process money inside your building. Here are six common questions and answers we hear.

1. Where does the money go?

Straight to the school. Your store operates as its own merchant, and sales settle to the school-controlled account your district designates. RallyOrder never holds your money, never routes it through our accounts, and never sits between your sales and your bank.

We built it this way on purpose. The store’s revenue is school money, in school accounts, visible to the people your district already trusts to watch money.

THE REGISTER every sale starts here STRIPE PCI-certified card processing; card data never leaves it CARD SALES settles directly THE CASH DRAWER counted every shift, deposited by the school, never by us CASH SALES school's own deposit THE SCHOOL'S ACCOUNT district-designated, school-controlled RallyOrder runs the platform and is never on either money path: the school is the merchant of record.
The whole answer, in one picture.

2. What happens to student data?

We don’t sell student data. We don’t share it, monetize it, or repurpose it beyond what directly serves the educational experience. That’s a foundational principle, and it’s written into how the company works, our agreements included.

The platform is built for FERPA and COPPA from the ground up, and we’re glad to walk your team through exactly what we collect and why. The short version: the minimum needed to run a store and teach from its data, and nothing that turns your students into a product.

3. Who can do what?

The platform enforces the same separation of duties your district already requires everywhere else money moves.

Advisors can configure permissions to control who has access to set and view: inventory, pricing, reporting, and refunds. A student can ring up sales all lunch period, and the sensitive actions (refunds are the classic example) sit behind a permission structure.

4. Is there an audit trail?

Yes, every transaction is recorded and available to view or export with time and context. The finance team will have access to a full set of reporting across Sales, Refunds, Tax Collected, and other order details they need to see. All of this data is yours and not behind any paywalls or extra fees. You can view the data in HomeRoom or export it to a CSV file to use elsewhere.

5. What about card security?

Card payments run on Stripe, the same payment infrastructure behind millions of businesses. Card data goes from the reader into Stripe’s PCI-certified systems, and it never touches RallyOrder’s servers. Your students can’t see card numbers, and neither can we.

If your IT director wants depth here, we’ll happily set up that call. It’s a short one, in a good way.

6. What happens when the Wi-Fi dies?

The store keeps selling. The point-of-sale is built to run through a network outage and sync back up when the connection returns, because school networks do what school networks do, usually during the lunch rush.

Offline operation has guardrails (card acceptance gets a safety cap until the connection returns, so nothing rides on an unverified card for long). Your line keeps moving either way.

Those six answers cover the first meeting. The longer ones live in our Trust Center: student data commitments, security practices, and the agreements behind them. Bring us whatever questions it raises.

Compliance & Safety ← All posts

Keep reading