The handshake is the moment a blind candidate becomes a named one — and the only moment a district ever sees a teacher's identity. It is initiated by the district, granted by the candidate, timed by the system, and logged forever.
Educator job markets are small, local, and political. A principal who spots a teacher's name on a job board can — and often does — change the next year's assignment. The handshake exists because the act of exploring should never be the act of disclosing.
of teachers who left the profession cite being unable to job-search safely as a contributing factor.
RAND State of the American Teacher, 2023
K-12 candidates say they would not apply if their current principal could see the application.
EdWeek Research Center, 2022
average district cost per teacher turnover event, including replacement and lost productivity.
Learning Policy Institute, 2017
average time-to-fill for a K-12 instructional role — driven by a thin, fearful applicant pool.
AASPA Talent Trends, 2023
Every handshake moves through the same four states. Transitions are one-way. Terminal states are immutable at the database layer.
Actor · Candidate
Profile is published with name, school, license number, university, email, and phone redacted server-side.
Actor · District
A district spends one unlock credit and writes a short reason. A 72-hour clock starts. The candidate is notified instantly.
Actor · Candidate
Accept and the district sees the full file and may message. Decline and the door closes — permanently, for that district.
Actor · System
At 72h the request expires. The district's credit is refunded. The candidate returns to Anonymous Active.
Identity disclosed. Conversation begins on-record. Audit row written.
District is permanently barred from that candidate. Credit consumed. Audit row written.
Request auto-closes at 72h. Credit refunded. Candidate returns to anonymous.
No request has ever resulted in disclosure without the candidate's explicit accept. That number is, by design, zero.
Districts get a per-job audit trail. Candidates get a per-request timeline. Admins get an append-only log that the application layer cannot modify or delete. Compliance teams can export the entire chain for any role, any candidate, any window.
Everything else — the blind profiles, the redaction engine, the credit ledger, the audit log — exists so that this one moment can be clean, consented, and recorded.