Security · Privacy · Compliance

Your school's data, handled with care.

Role-based access control, AES-256 encryption at rest, TLS 1.3 in transit, audit logs on every action, and automated nightly backups — every layer of protection your school deserves.

Our promise

Three layers that never sleep.

Every record, every session, every backup — protected end-to-end.

Encrypted everywhere

TLS 1.3 for every byte in transit. AES-256 for every record at rest. Encrypted database backups. Key management isolated from application servers.

Role-based access

Granular permission matrix — principal, teacher, clerk, accountant, parent — each sees only what they need. Every change written to an immutable audit log.

Daily backups

Automated nightly backups with 30-day retention. Point-in-time restore. Geo-redundant storage. Your data survives anything.

Architecture

How your data travels.

Every request passes through the same hardened path.

Parent AppAndroid + iOSAdmin PortalReact webStaff AppAndroid + iOSTLS 1.3Secure APINode.js · Role-gated · Auth middlewareEncrypted DBAES-256 at rest
Threat model

Common risks. Clear answers.

Common school data risks
How AiraNexus handles it
Lost USB drive with student records
No local file exports needed — everything lives in role-gated cloud dashboards.
Shared spreadsheets via email / Google Sheets
Single source of truth in AiraNexus — no spreadsheet hand-offs, no version drift.
WhatsApp screenshots of fee or mark data
Parents see their own child only via authenticated app — no screenshots circulate.
Paper registers lost or damaged
100% digital with automatic backup — no single point of failure.
Weak or shared passwords among staff
Enforced strong passwords, mPIN, optional biometric, session timeout, force-logout on device change.
Data exposure when staff member leaves
Admin deactivates the account — access revoked instantly, all sessions invalidated.

Standards & compliance

OWASP Top 10 patched
DPDPA-aware
GDPR-ready
Indian data servers
SOC2 path
Audit logs

Every action, accounted for.

Full immutable history — who changed what, when, and from where.

Audit Log · api.airanexus.in/admin/audit-logs
2026-04-29 09:14:32 IST[ADMIN] updated fee concession student_id:1042 · ₹3,000
2026-04-29 09:08:11 IST[TEACHER] submitted attendance class:6-A · 38 present
2026-04-29 08:55:47 IST[PRINCIPAL] approved leave staff_id:204 · 2 days
2026-04-29 08:43:02 IST[PARENT] viewed report card student_id:88 · Term 2 2026
2026-04-29 08:31:19 IST[ADMIN] reset staff password staff_id:117 · via OTP

Whitepaper

Request our security whitepaper.

Detailed architecture, threat model, and compliance notes — PDF delivered within 1 business day.

We'll send the PDF within 1 business day. No spam.

Questions

Straightforward answers.