Encryption everywhere
Your data is encrypted the moment it leaves a device and stays encrypted on disk.
- AES-256 at rest, TLS 1.2+ in transit
- Encrypted database backups
- Managed key rotation
Access control
People see only what their role allows — enforced on every request, not just the UI.
- Role-based permissions per institution
- Single sign-on (SSO) support
- Granular admin & audit roles
Secure infrastructure
We build on hardened, reputable cloud infrastructure with isolation between customers.
- Logical tenant isolation
- Private networks & firewalls
- Least-privilege internal access
Monitoring & response
We watch the platform around the clock and have a plan for the day something looks wrong.
- 24/7 automated monitoring & alerts
- Centralised, tamper-evident logs
- Documented incident-response plan
Backups & recovery
Your records are backed up continuously, so a bad day never becomes a lost year.
- Automated, encrypted backups
- Point-in-time recovery
- Tested restore procedures
Privacy by design
We collect the minimum, keep it only as long as needed, and never sell it.
- Data minimisation & retention limits
- No selling of personal data
- Student data never used to train public AI
