ENTERPRISE DATA GOVERNANCE & SAFETY

Institutional Trust.
Protecting school data is non-negotiable.

Schools hold society's most sensitive records: student attendance and academic evaluations, guardian contact lines, and confidential financial ledgers. Here is how Shikshya Setu protects every byte.

TLS 1.3 Encryption
100% Tenant Isolation
Automated Daily Backups
Zero Ad Monetization
Defense in Depth

Institutional Data Flow Architecture

How records travel securely from classroom devices to protected private database clusters.

01

Encrypted Client Edge

All portal sessions (School Office, Teacher Workspace, Parent App) communicate strictly through modern TLS 1.3 with cryptographic forward secrecy.

HTTPS Strict-Transport-Security
02

Gateway & Rate Limiting

Every incoming API request is filtered for abnormal traffic spikes, brute-force credential stuffing, and injection attempts before reaching institutional databases.

Automated DoS Shielding
03

Isolated School Container

School records are logically segregated. Class data, teacher chats, and fee ledgers are scoped strictly by institution key with no cross-school leak risk.

Zero Cross-Tenant Leakage
04

Encrypted Cold Snapshots

Automated redundant snapshots run daily during off-peak hours. In any unforeseen event, point-in-time recovery ensures no student record is ever lost.

Disaster Recovery Ready
Security Standards

Six Guarantees for Every Enrolled School

We hold ourselves to rigorous enterprise standards so school administrators can sleep soundly.

Role-Scoped Permissions

Access is governed strictly by institutional hierarchy. Superadmins control module permissions. Teachers only view classes they teach, and parents can only see records for their own children.

Granular RBAC Enforced

Your Data Belongs to You

We never monetize student data, share contacts with advertisers, or use school rosters for marketing. Your school retains 100% legal ownership of its records.

Zero Commercial Sharing

Encryption in Transit & Rest

All web and mobile communications run over TLS 1.3 encryption. Passwords and credentials are cryptographically hashed using industry-standard salt algorithms.

Cryptographic Hash Storage

Safe Financial Handling

Online fee payments are handled through certified payment gateways. Shikshya Setu never stores bank account credentials or payment card CVVs on application servers.

No Raw Card Storage

Automated Daily Backups

Daily redundant database snapshots protect your school from accidental deletion or hardware failure, ensuring rapid disaster recovery and business continuity.

Daily Automated Snapshots

Sandboxed AI Privacy

AI queries run against your private tenant container. Your institutional data is never used to train public models or shared with other schools.

No Public Model Training
Access Architecture

Strict Permission Boundaries

Every user account in Shikshya Setu belongs to an explicitly scoped role, ensuring no person sees more than their institutional responsibility mandates.

User Role Scope of Data Access Messaging Authority AI Feature Scope
Superadmin (Owner / Principal)
100% access to institutional records, fee ledgers, staff rosters, and audit logs. Whole School broadcasts, all classes, department chats, private DMs. Executive AI
Delegated Admin (Incharge / Staff)
Access scoped at creation time by the Superadmin (e.g. attendance only, no fee viewing). Assigned department & grade channels. Restricted / Scoped
Teacher
Classes, subjects, and rosters assigned to that educator only. Class groups taught, department chat, direct DMs to parents/admins. Score Card Analysis
Parent / Guardian
Read-only academic progress and attendance for their enrolled children only. School broadcasts + Private DM to child's class teacher only. View Score Card
Student
Personal timetable, homework submissions, and learning practice modules. Own class group + DM to teacher only. (Zero student-to-student DM). AI Self-Practice
INSTITUTIONAL DATA COMPLIANCE

Have compliance or infrastructure questions?

Our technical team in Kathmandu can review data backup protocols, institutional agreements, and legacy data migration plans with your management board.

Review Privacy Policy