Three colleagues around a café table with papers and a tablet.
For sending organisations

Nine spreadsheets
and a shared mailbox.

That is what most programmes actually run on, and it works right up to the evening something goes wrong. One record per student instead — readable by everybody who is allowed to read it, and by nobody else.

What changes

Six things that are different by the second week

Colleagues at a café table with papers.
The first hour

Bring what you already have

Import is previewed before it commits and stays reversible for thirty days. The workbook remains on the administrator’s device unless it is separately uploaded to the private workbook library.

Hands over printed charts and coffee.
Matching

Defensible on the phone

Every candidate carries its score broken into named dimensions, plus one sentence a coordinator can read aloud.

Someone writing on a tablet at a meeting.
Documents

They know their own expiry

Twenty-one typed categories and expiry computed in the database — so an expired passport says so even if the phone’s clock is wrong.

Three colleagues talking over a laptop.
Roles

Enforced, not hidden

A coordinator sees their own region. That is the database refusing, not a hidden menu item.

A colleague listening in a meeting.
Drift

Flagged weeks earlier

Seven detectors over your own rows, thresholds from your own median — each with the window and the exact rows behind it.

A forested ridge in morning light.
Money

What happens when it fails

A missed instalment changes nothing for the student. If you fall behind with us, no student can tell.

The first hourBring what you already have
MatchingDefensible on the phone
DocumentsThey know their own expiry
RolesEnforced, not hidden
DriftWeeks earlier
MoneyWhat happens when it fails
The first hourBring what you already have
MatchingDefensible on the phone
DocumentsThey know their own expiry
RolesEnforced, not hidden
DriftWeeks earlier
MoneyWhat happens when it fails
RolesEnforced, not hidden
DriftWeeks earlier
MoneyWhat happens when it fails
The first hourBring what you already have
MatchingDefensible on the phone
DocumentsThey know their own expiry
RolesEnforced, not hidden
DriftWeeks earlier
MoneyWhat happens when it fails
The first hourBring what you already have
MatchingDefensible on the phone
DocumentsThey know their own expiry
A rock tower above forested slopes at dusk.
Instead of nine files

One record per student, and one place to stand.

Setup steps, resumable
6
In any order, nothing blocks you
Import stays reversible
30 days
The source workbook stays on your device
Drift detectors on your rows
7
Thresholds from your own median
The first hour

Bring what you already have

1

Import is previewed before it commits

You see our reading of your spreadsheet before a single row is written, and it stays reversible for thirty days.

2

We never guess a person

An ambiguous row is flagged, not merged. Two students who might be the same student stay two rows until somebody decides.

3

The original stays with you

The import workbook remains on the administrator’s device. Files deliberately added to the workbook library are stored privately and managed separately.

4

Setup never blocks you

Six steps, resumable, in any order. You can invite a student before you finish — anything unfinished becomes a task, not a wall.

Guided import and setup controls are part of the product. Any assisted migration, onboarding service or team training must be agreed separately rather than assumed from this page.

A coordinator smiling on the phone by the water.
“One sentence a coordinator can read aloud to a mother.”

What a matching score has to produce to be worth having.

What changes

Four things that are different by the second week

Matching you can defend on the phone

Every candidate carries its score broken into named dimensions and one sentence a coordinator can read aloud to a mother who wants to know why this family and not the one in her own town.

How matching works →

Documents that know their own expiry

Twenty-one typed categories, requirements per programme and phase, and expiry computed in the database — so an expired passport says so even if the phone’s clock is wrong.

Roles that are real

A coordinator sees their own region. That is enforced by the database, not by hiding a menu item — a second, independent reader obeys it too.

Per-field permissions →

Work prepared, not invented

Ariadne drafts the reminders, the briefs and the summaries, with the consequence class on the button before you tap it.

What she may and may not do →

The board tells you the truth about its own numbers

Seven stages, ageing on every card — and the ageing says where the number came from: in this stage, since the record last changed, or since it was created. A card that shows a dash because nobody asked for a timestamp is not ageing; it is an apology.

The work-in-progress limit is enforced rather than decorative. Going over it blocks the drop, names the arithmetic — “matching holds 48 of 48, this makes 49” — and takes a typed reason that lands on the student’s timeline.

Placements · matching
StudentAgeing, and its source
J. Thaler21d in stage
N. Berg7d since change
K. Novak— no timestamp
Matching holds 48 of 48. This makes 49. Type a reason to go over, and it lands on her timeline.
Two colleagues looking at the same tablet screen.
“A flat line that looks like good news is worse than no line.”

Why a detector is allowed to answer dormant.

Weeks earlier

Drift is flagged before it becomes an incident

Seven detectors run over your own rows. Each names a pattern in one line a person would say aloud, shows the window and the exact rows behind it, and offers one move. Thresholds come from your own median, not from a manual written for somebody else.

And there is an honest third answer besides signal and clear: dormant — the detector says which data it needs, that you are not recording it, and draws nothing rather than a flat line that looks like good news.

Money

What you charge, what you pay, and what happens when it fails

Family fees as a plan with dates, not a total with a shock — itemised, with what is not included estimated before anybody signs.

A missed instalment changes nothing for the student. Placement, school and support continue; the options are retry, split smaller, or talk to someone confidentially.

Host-family stipends as a prepared run with the exceptions separated out. Ariadne prepares it and cannot release it.

If you fall behind with us, no student can tell. Five steps over sixty days, removing convenience and never safety — and it ends in a person, not a shut-off.

The dunning ladder →

Run one intake beside your current process

Access is $1.25 per connected code. Every current plan includes 30 days on your own data with no card and does not turn into an automatic paid subscription.