Security & compliance

Enterprise-grade security, built in.

Your institute's data — and your students' and parents' — protected by encryption, isolation, audit trails and a compliance posture you can show your board.

How we protect your data

Defence in depth.

🔒
TLS 1.2+ in transit

Every request encrypted end to end

🗄️
Encryption at rest

Data encrypted in storage

👤
Role-based access

Granular, least-privilege permissions

📜
Tamper-evident audit logs

Hash-chained — silent edits break the chain

💾
Automated backups

Point-in-time restore

🏢
Multi-tenant isolation

Your data walled off from every other tenant

🔑
MFA for admins

TOTP + recovery codes for privileged access

🧭
Session binding

Sessions bound to IP + device fingerprint

🛡️
API security

Scoped tokens, rate limits, IP allow-lists

🇮🇳
India-resident hosting

AWS Mumbai (ap-south-1)

🧪
Secure SDLC

Code review + automated security gates in CI

🚨
Anomaly guards

Rate-limiting + brute-force protection

Compliance

Aligned today. Certified next.

We're upfront about what's in place now and what's on the roadmap.

● In place
DPDP Act 2023 — aligned

Built around India's Digital Personal Data Protection rules as they're notified.

● In place
GDPR-ready

Data-subject rights, export and deletion workflows for EU institutes.

● In place
Data residency

Hosted in India (AWS Mumbai). Your data stays in-region.

Roadmap
SOC 2 Type II

On our compliance roadmap — not yet certified. We'll publish the report when it's done.

Roadmap
ISO 27001

Planned certification path. We won't claim it until the audit is complete.

● In place
FERPA-aligned (US)

Student-record handling aligned for US tutoring & test-prep.

Your data, your rights

You own your data. Always.

📤

Export anytime

Full export of your students, fees and content whenever you want — no lock-in.

🗑️

Delete on request

Backups retained for a limited window after cancellation, then permanently deleted.

🚫

We never sell data

Your data is never sold or shared for advertising. Full stop.

Security questions? Talk to us directly.

We'll walk your team through our controls and answer the hard questions.

Encryption · Isolation · Audit trails · India-resident