Tenet·Feature Guides 06 · Deployment & Administration ← All guides
Guide 06 · Rollout

Deployment & Administration

Tenet goes from decision to deployed in under a day, using tools the district already owns, with no new infrastructure, no network changes, and no agent installers. This is the guide for the IT-director conversation.

All tiers
What it is

A managed Chrome extension, force-installed

Tenet is delivered as a managed Chrome extension. A district pushes it from the Google Admin Console the same way it pushes any other approved extension, and it lands on every managed Chromebook in minutes. Students cannot disable, uninstall, or bypass it, because it is installed by district policy rather than by the user.

Memorize this
“Tenet ships in 24 hours, not 24 weeks.”
How it deploys

The rollout, step by step

Force-install from Google Admin

Google Admin Console, then Devices, Chrome, Apps and extensions, then Force install. This is the same flow IT already uses for other extensions, and it takes about ten minutes.

Configure rules

The admin sets the district-wide rules and approved-AI list in the dashboard, roughly 30 to 60 minutes. Teachers add their own class rules later (Pro).

Add roster for Pro

Pro features that need a roster import it via CSV today, with ClassLink and Clever integration shipping fall 2026. Basic needs no roster at all.

Sign the DPA

A pre-cleared Student Data Privacy Consortium template makes the data privacy agreement fast, typically under two weeks, and it runs in parallel with everything else.

Basic timeline

Live the same business day. Force-install is minutes, rule setup is under an hour.

Pro timeline

Two to three days, mostly to import the roster and let teachers set class rules.

Windows option

Force-install also works on managed Windows via Edge policy, where applicable.

What IT does not have to do

The friction that simply is not there

Common rollout taskWith Tenet
Stand up servers or infrastructureNone. Our backend is hosted.
Network or firewall changesNone.
SSL certificates or proxy setupNone. There is no proxy.
Agent or software installers on each deviceNone. It is a managed extension.
Replace the existing web filterNo. Tenet pairs alongside it.
Identity and login plumbingUses the district's existing Google Workspace.
Administration and control

What the admin gets after go-live

An emergency kill switch

A single setting that turns Tenet's enforcement off district-wide, instantly, if something needs to be paused. IT is never stuck.

District-owned analytics

Sanitized, categorical analytics that the district owns and can route to its own storage, Google Sheets, S3, GCS, or a webhook. Student names are hashed or redacted before capture.

Per-district isolation

The multi-tenant backend isolates every district at the database level, so one district can never see another's data.

Filter compatibility

Tenet is built to coexist with the major web filters, including a compatibility mode for districts running Securly.

Who it sells to

Lead with the right person

Director of IT

The whole rollout is a few hours of hands-on time, with no infrastructure, no network changes, and an emergency off switch. This is the easiest yes you will give all year.

Superintendent

The district can move now, this week, rather than waiting on a multi-month procurement and integration project.

Principal

A building playbook for the first week, a short weekly pulse, and clear signals when a classroom has not finished setup.

Common questions

FAQ

How long does this actually take to deploy?
Basic can be live the same business day. Pro with roster is two to three days. The DPA, on a pre-cleared template, is usually under two weeks and runs in parallel.
Can students remove it?
No. It is force-installed by district policy, so students cannot disable, uninstall, or bypass it.
Will it conflict with our existing filter?
No. It is designed to coexist, with a specific compatibility mode for Securly. Most districts keep both products.
What if we need to turn it off fast?
There is a district-wide kill switch that disables enforcement instantly. No deploy or uninstall required.
Honest limits

Say this before they ask

Where to set expectations

  • Deployment targets managed Chrome (Chromebooks, and Chrome on managed Windows). Other browsers and native mobile apps are not covered yet.
  • Live roster sync via ClassLink and Clever ships fall 2026. CSV roster import is available today, and Basic needs no roster at all.
Keep reading

Related guides