Data Safety Assurance

Enterprise Security &
DPDP Act Compliance

We protect your student records, guardian contact details, and fee transaction logs using robust multi-tenant database isolation, bcrypt credentials, and DPDP-aligned privacy guidelines.

Security Architecture

DPDP Multi-Tenant Scoping

REQUESTIncoming API call to server
FILTERTenant check (School ID === Session ID)
Isolated MySQL Tenant Scope
ISOLATED

Tenant Data Isolation

Each school operates in strictly isolated database scopes within our MySQL cluster. Access keys prevent cross-tenant queries or data bleed.

Encrypted Secrets

All school-admin API credentials, payment gateway keys, and logins are encrypted at rest. Passwords use secure bcrypt hashes.

Minimal Retention

We avoid storing government identifiers, raw files, or student birth certificates unless strictly required for compliance audits.

DPDP Verification

Aligned with India's Digital Personal Data Protection Act. Consent notices are generated, and parents retain legal rights to view linked logs.