Security & privacy
A school holds minors' records. That sets the bar.
Names, photographs, addresses, medical notes, guardians, fee histories. In most schools today that sits on an unpatched machine behind a password three people share. Here is what we do instead, in plain terms.
The controls
What protects your data
Row-level security, per school
Every record is scoped to a verified school at the database level — not by a filter somebody might forget in application code.
Encrypted at rest and in transit
AES-256 at rest, TLS 1.3 in transit. Teachers see only their classrooms; parents only their own wards.
DPDP Act 2023
Built to the Digital Personal Data Protection Act 2023 for consent, retention and the rights of a data principal.
No shared passwords, ever
When our engineers need to help, they enter a scoped, time-boxed, recorded session. Nobody emails a password.
An audit ledger you cannot edit
Every fee waiver, grade change and attendance edit is written down with who did it and when.
NEP 2020, APAAR and DigiLocker
APAAR ID mapping and DigiLocker sync, built for the frameworks arriving rather than bolted on after they land.
Verifiable credentials
A marksheet anyone can forge is not a record. It is a rumour.
A paper report card or transfer certificate can be reproduced in an afternoon with a desktop publishing tool, which is how forged credentials reach college admissions and employers. Every document SCHOOL OS issues is signed and checkable at source.
01
Marks are finalised
The school signs off the result inside SCHOOL OS. Nothing after this point can be quietly edited.
02
The document is signed
A cryptographic signature is applied with the school’s own key and anchored with a unique hash.
03
A QR code goes on the PDF
The board-compliant report card or transfer certificate prints as usual, with the code in the corner.
04
Anyone can check it in two seconds
A college registrar, an employer or the next school scans it and sees the authentic record from the source — not a photocopy they have to trust.
One-click transfers, instead of a fortnight of paperwork
When a student moves between two schools that both run SCHOOL OS, the old school clears dues and library items and releases the record; the new school scans the digital transfer certificate. The verified profile, academic history and guardian records arrive intact. No retyping, no forged documents, no parent travelling back to a previous city for a signature.
Built for NEP 2020, APAAR and DigiLocker
India’s Ministry of Education is consolidating student identity under APAAR — one academic account per student — with DigiLocker as the document wallet. SCHOOL OS maps APAAR IDs and syncs documents natively, so when these frameworks become mandatory for your affiliation you are not starting a project.
Send your security questionnaire.
If your trust or board has a form, send it over and we will fill it in properly rather than waving at a certificate badge. If something is not built yet, the answer will say so.