Account, plans & security
How is our school’s data protected?
Edutris is built around India’s DPDP Act 2023. Traffic is encrypted in transit (SSL/TLS), access is role-based (teachers see their classes, parents only their own children), every school’s data is isolated on multi-tenant infrastructure, changes leave an audit trail, and automated backups run with rotation. The same protection applies on every plan — security is never an add-on tier.
Before you start
- Assign roles deliberately — permissions follow the role, so the role list is your access policy.
- Make disabling accounts part of your exit process: when a staff member leaves, their account is disabled in one click from user management.
- Nominate who at the school answers data questions from parents, and point them at the privacy policy’s grievance route.
Steps
- 1
Assign the right role to each user — permissions follow the role automatically.
- 2
Review the audit log for fee actions, grade publishing and record changes.
- 3
Disable a departing staff member’s account in one click from user management.
Good to know
- Access is role-scoped and enforced on the server, not just hidden in the interface — a teacher cannot reach the fee ledger, an accountant cannot reach academic records, and a parent sees only their own children. These boundaries are verified, not assumed.
- Every school’s data is isolated on multi-tenant infrastructure — one school can never read another’s records, even by manipulating URLs.
- Traffic is encrypted in transit (SSL/TLS), and sessions are short-lived with automatic refresh, so a stolen old token is useless.
- Sensitive actions — fee changes, grade publishing, student deletion, admissions decisions, settings changes — are written to an audit log the school can review.
- Admission documents are stored privately, viewable only by the school, and documents of rejected applications are deleted automatically after the retention period — data minimisation by default, in line with DPDP principles.
- Automated backups run with rotation, and the same protections apply on every plan — security is never a paid add-on.
Common questions
Who can see my child’s records?
The school staff whose role requires it, and you — for your own children only. A parent account cannot see another family’s child, and a teacher sees their own classes, not the whole school. Access boundaries are enforced on the server.
Is our data sold or shared with advertisers?
No. Edutris does not sell personal data and runs no advertising. The third parties actually involved in running the service are named in the privacy policy, and school data is processed on the school’s instructions.
Can the school get its data back out?
Yes — student lists export to CSV, and the reporting surfaces export filtered attendance, fee and enrolment reports the same way. If you ever leave, your register leaves with you.
Related
Can't find it? Ask us directly.
See Edutris running with your school in mind, or reach a real person on email — Mon–Fri, 9–6 IST.