For IT teams
Technical details for school and local authority IT teams
Everything you need to check Pupil Outlook and allow it on your network. If you have a question that isn't answered here, email hello@pupiloutlook.com.
Domains to allow
| Domain | What it is for |
|---|---|
| pupiloutlook.com | The website, the demo (pupiloutlook.com/demo), the Year 6 return page and the pilot application form. |
| fonts.googleapis.com, fonts.gstatic.com | Google Fonts, for the site's typefaces. If these are blocked the site still works, with standard fonts. |
| claude.ai | Only for pilot schools: the pilot version of the planning tool is shared by invitation through claude.ai. |
If the site is blocked as "malicious"
Some school networks show a warning that pupiloutlook.com "may be associated with malicious activity". We believe this is a false positive: the domain is new, and new domains are often flagged automatically.
- 1
Check the domain yourself
Look up pupiloutlook.com in Google Safe Browsing's site status checker and on VirusTotal.
- 2
Report the false positive
If your network uses the National Cyber Security Centre's Protective DNS service, raise pupiloutlook.com as a false positive through your organisation's Protective DNS route. If another filter is blocking it, use that provider's site review form.
- 3
Allow it locally meanwhile
Adding pupiloutlook.com to your allow list lets pilot schools carry on while the review happens.
How the site is built and secured
| Hosting | A static website on Vercel, served over HTTPS only (HSTS enabled). |
| Scripts | All scripts come from pupiloutlook.com itself. A Content-Security-Policy blocks scripts from anywhere else and blocks the site being framed by other sites. |
| Tracking | No advertising, tracking or analytics. No third-party cookies. |
| Forms | The pilot and interest form stores name, work email, role, school and message in a database in Upstash's London (UK) region. |
| The demo | Runs in the browser and saves only to that browser's local storage. Nothing typed into it is sent to us. |
| Pupil data | Group totals only, never pupil records. Files with names, UPNs, dates of birth or addresses are refused, and groups under 5 pupils are hidden. Data and privacy |
Need something else?
For security questions, documents for your data protection officer or help with allow-listing, email hello@pupiloutlook.com.