Isora handles information about children. That is why data protection is not an add-on: it is built into the very structure of the application.
The child's first name, last name, date of birth and notes are encrypted in the music therapist's browser before they leave it. The same applies to the free text of observations, Time Machine notes and the texts of IEP-style goals. Only encrypted text reaches the server, linked to a pseudonymous code. The keys belong to the practice and are unlocked with a passphrase or a passkey.
When an island uses the microphone or camera, they only serve to create music. On the device signals become numbers, for example the pitch and length of a note, the energy of a movement or the points of a stick figure; audio, video and images are never saved or sent. The Time Machine re-synthesises melodies from those numbers, not from recordings.
From activities only numeric values and choices are kept: how long an island lasted, which elements were chosen, which notes were sung, how some values change over time. They help the therapist observe, not compute scores. Session events remain available for 400 days.
No open sign-up: accounts are created only by invitation. Two-factor authentication is mandatory for professionals; they can also sign in with a passkey or a linked Google account. Sessions expire and renew securely. The child has no credentials: they use a temporary code.
Whoever runs the platform never sees profiles or clinical data. The parent sees only linked profiles, without clinical data. Islands run on a separate origin and cannot read the app's data. Every reading of a session's data is kept in the practice's log.
The site you are reading uses no cookies, analytics or tracking, and loads nothing from external services: fonts and images are served with the pages. The contact form sends your request by email and does not store it.
