Studiepartner

3

Students

3

Active plans

3

Pro accounts

4

Pending invites

2

Admins

Needs attention

Things that will quietly break if left alone.

Programme version not re-checked UiO · Psykologi (bachelor) · cohort H2026 · last checked 31 July 2026	due in 30 days
Semester 2–6 course codes unconfirmed Psykologi H2026 · 5 semesters showing structure only	expected Sept
Timetable sync failed 1 student · feed returned empty · not yet registered for courses	expected
TLS certificate renewal studiepartner.com · automatic · Cloudflare Access bypass in place	late Sept

Pilot health

The only two numbers that decide whether this works.

Week-8 active rate Students still completing tasks in week eight	not yet measurable · week 3
Semester-two repurchase Paid again without being asked	measurable Jan 2027
Weekly email open-to-return Returned within 48h of the Sunday send	first send 6 Sept

You can see whether an account works. You cannot see what a student wrote, planned or answered. Opening a user's detail is logged.

Student	Programme	Plan	Timetable	Last active
Anna Hansen [email protected]	Psykologi (bachelor) UiO · H2026 · 1. sem	Degree Pro pilot, free	connected synced 06:00	2 hours ago
Mikkel Berg [email protected]	Psykologi (bachelor) UiO · H2026 · 1. sem	Degree Pro pilot, free	empty feed not yet registered	yesterday
Sara Lund [email protected]	Psykologi (bachelor) UiO · H2026 · 1. sem	Degree Pro pilot, free	connected synced 06:00	4 days ago

Admins

Fushi [email protected]	owner	full access
Parvinder — commercial partner	admin	no student detail access

Admin roles are separated deliberately. Commercial access sees counts and billing, never an individual student's account. Fewer people able to open a student record is easier to defend to a university.

Who can register

The pilot is closed. This is the gate.

Invite only

Nobody can create an account without a code from you

Require a student email address

Blocks personal addresses even with a valid code

Require email confirmation before first login

Account stays inactive until the link is clicked

Let students invite group members

Max 20 invitations per student per week

Accepted email domains

Only addresses at these domains can hold an account.

@student.uio.no @uio.no @student.ntnu.no @student.uib.no

Adding a domain does not open registration — invite-only still applies on top.

Send invitations

One address per line. Each gets a single-use code that expires in 14 days.

Plan they receive

Invitations are rate limited and every send is logged. Recipients can decline permanently, which suppresses their address for good.

Outstanding invitations

Address	Sent	Status
[email protected]	yesterday	not opened
[email protected]	2 days ago	opened, not used
[email protected]	6 days ago	not opened
[email protected]	11 days ago	expires in 3 days

Access requests

People who tried to sign up without an invitation. Nothing is stored beyond the address and what they typed until you approve.

Address	Claimed	When
[email protected]	Psykologi (bachelor) · H2026	3 hours ago
[email protected]	Psykologi (bachelor) · NTNU Institution not live yet	yesterday
[email protected]	— no programme given	2 days ago	domain not accepted

Declining deletes the address rather than keeping it on a list. Holding contact details for people you turned away is the kind of thing that has to be justified later.

Audit log

Every consequential action, including your own. Retained for 24 months, then purged.

When	Actor	Action	Target
today 21:38	Fushi	INVITE_SENT	[email protected]
today 20:14	Fushi	USER_DETAIL_VIEWED account state only	[email protected]
today 06:00	system	TIMETABLE_SYNCED	3 accounts · 1 empty feed
yest. 18:22	Fushi	PROGRAMME_VERSION_VERIFIED semester 1 confirmed against UiO	psykologi-bachelor/H2026
yest. 11:05	Anna Hansen	DATA_EXPORTED student-initiated	own account
30 Jul 14:40	Parvinder	ADMIN_SIGNED_IN	—
30 Jul 09:12	system	PLAN_REGENERATED recovery, student-triggered	1 account

The log never contains a decrypted timetable link, a password hash, or the body of anything a student wrote. If it ever does, that is a severity-one incident.