Security & compliance

Your school's data.
Guarded like it matters.

We handle student records — that's a responsibility we take seriously. Bank-level encryption, data hosted in India, and compliance built into every layer of the stack.

AES-256 encryption
Hosted in India
ISO 27001 aligned
DPDP Act compliant
DPO assigned
How we protect you

Security built into every layer

End-to-end encryption

TLS 1.3 in transit, AES-256 at rest. Your student data is encrypted at every hop, every database row.

Hosted in India

All data is stored in Mumbai and Hyderabad AWS/GCP regions. Never leaves Indian borders — fully DPDP-ready.

Granular role access

Role-based permissions down to the field level. Teachers see their classes. Parents see their children. Admins see what you allow.

Multi-factor auth

SMS OTP, email OTP, authenticator apps, and biometric login on mobile. SSO available on Enterprise.

Daily backups

Automatic daily snapshots retained 30 days. Point-in-time restore within minutes if you ever need it.

Audit logs

Every sensitive action is logged — who changed what, from where, when. Exportable for compliance audits.

Compliance & certifications

Standards we meet, and beat

Aligned

GDPR

EU data protection aligned

Compliant

DPDP Act (India)

India Digital Personal Data Protection Act 2023

Aligned

ISO 27001

Information security management

In progress

SOC 2 Type II

Security, availability, confidentiality

Compliant

CBSE data norms

CBSE affiliated school guidelines

Audited

CERT-In empanelled

Indian cyber incident response

Our promise

Our data commitments

The things we won't do, written down.

  • We never sell your data to third parties. Ever.
  • We never use student data to train AI models.
  • You own your data — export anytime as CSV, PDF, or API.
  • End of contract? We delete everything within 30 days on request.
  • Annual third-party penetration tests, results available on request.
  • Dedicated DPO for DPDP Act compliance support.
Security FAQs

The questions IT teams always ask

All primary data is hosted in AWS Mumbai (ap-south-1) with disaster-recovery replicas in GCP Hyderabad. Data never leaves India.

Need a full security review or SOC 2 report?

Available on request for Enterprise customers under NDA.

Ready when you are

Trust is non-negotiable for us

Book a walk-through with our security team — we'll answer every question before you share a byte of data.

No credit card30-day free trialCancel anytime
S
M
R
A
+246
4.8
from 250+ schools