Enterprise-grade security, built in.
Your institute's data — and your students' and parents' — protected by encryption, isolation, audit trails and a compliance posture you can show your board.
Defence in depth.
Every request encrypted end to end
Gateway keys, SSO and 2FA secrets encrypted (AES-256); passwords hashed
Granular, least-privilege permissions
Sensitive actions logged; the platform-admin log is hash-chained
Daily database backups, kept for 30 days
Every query scoped to your institute, covered by cross-tenant tests
TOTP authenticator + recovery codes, available to every account
Platform-admin sessions bound to IP + browser, with timeouts
Scoped tokens and rate limits
Hetzner Online GmbH, Falkenstein, Germany
Automated tests, static analysis and dependency audit in CI
Rate-limiting + brute-force protection
Honest status. No borrowed badges.
We're upfront about what's in place now and what's on the roadmap.
Working towards alignment with India's Digital Personal Data Protection rules as they are notified. Not independently assessed.
In-app data export today; account deletion is handled on request. Not independently assessed.
Application, database and backups are hosted in Germany (EU) by Hetzner Online GmbH. We do not offer India data residency today.
On our compliance roadmap — not yet certified. We'll publish the report when it's done.
Planned certification path. We won't claim it until the audit is complete.
We have not had our US student-record handling independently assessed. Ask us for details.
You own your data. Always.
Export anytime
Full export of your students, fees and content whenever you want — no lock-in.
Delete on request
Backups retained for a limited window after cancellation, then permanently deleted.
We never sell data
Your data is never sold or shared for advertising. Full stop.
Security questions? Talk to us directly.
We'll walk your team through our controls and answer the hard questions.
TLS · Isolation · Audit trails · Hosted in Germany (EU)