Schools trust us with their most sensitive data.
Here's how we earn it.

Every privileged backend query is scoped by the schoolId in your JWT. No code path lets one tenant read another tenant’s rows — not even by guessing IDs. Frontend-supplied IDs are never trusted; the server re-derives the school context from the signed token on every request.

Nine built-in roles (super, district, school admin, teacher, accountant, librarian, office staff, student, parent) plus per-user permission overrides. A school admin can revoke any granular permission for any staff member without writing code.

TLS 1.2+ on every connection. Database volumes encrypted with AES-256 at rest. Refresh tokens hashed before storage. We never store payment card data — Razorpay handles PCI scope end-to-end.

Hourly point-in-time backups with 30-day retention. Multi-AZ Postgres replication. Target 99.9% monthly uptime; status page reports incidents in real time.

Logins, password resets, fee receipts, exam grading, permission changes — every privileged action is logged with actor, IP, user agent and metadata. School admins can review their own school’s audit trail; super admins can review platform events.

Short-lived access tokens with rotated refresh tokens. Forgot-password flows use single-use, time-boxed reset tokens. Google SSO available on Scale; SAML SSO on Enterprise. MFA on the roadmap for 2026.