A checklist for an admin or SPED lead to confirm that parent sharing is scoped, revocable, and FERPA-aware before access spreads across a building. Work through it as four phases: audit the active links, confirm what families actually see, lock down revocation, and align everything to district policy.

Phase 1: audit who has access right now

Walk the active parent access links and confirm each one is labeled and points to the intended guardian, not a stale or mislabeled contact. Links are scoped to a single student chart and are private, not public, but only a real audit tells you whether that promise is being kept in practice. Flag any unlabeled or unfamiliar link for review with the teacher who created it.

Phase 2: confirm what families can see

Open the parent portal view for a sample of students and check exactly what is exposed: the daily chart, translated labels, recent history where enabled, and any notes. Verify that sensitive narrative notes are not landing in a family-facing view unless the team intended to share them. Preview before sharing should be the default for any update with incident or emotional context.

Phase 3: verify revocation works and is used

Confirm staff know how to revoke a link from chart settings and that revocation takes effect immediately for that parent portal. Check that the team rotates links when contact or custody changes and uses shorter sharing windows for sensitive situations. A revocation routine that exists only on paper is the gap most likely to surface during a complaint.

Phase 4: align to district policy and roles

Map the sharing workflow to your district's privacy and records policy, and confirm role-based access matches who should create students, create charts, and view rollups. Decide which exports (PDF reports, communication logs) become part of the student record under your policy. Evident supports FERPA-aware workflows, but the district is the source of truth for retention and records decisions.