Encrypted everywhere
TLS 1.3 for every byte in transit. AES-256 for every record at rest. Encrypted database backups. Key management isolated from application servers.
Security · Privacy · Compliance
Your school's data, handled with care.
Role-based access control, AES-256 encryption at rest, TLS 1.3 in transit, audit logs on every action, and automated nightly backups — every layer of protection your school deserves.
Our promise
Three layers that never sleep.
Every record, every session, every backup — protected end-to-end.
Role-based access
Granular permission matrix — principal, teacher, clerk, accountant, parent — each sees only what they need. Every change written to an immutable audit log.
Daily backups
Automated nightly backups with 30-day retention. Point-in-time restore. Geo-redundant storage. Your data survives anything.
Architecture
How your data travels.
Every request passes through the same hardened path.
api.airanexus.in / architecture
Threat model
Common risks. Clear answers.
Common school data risks
How AiraNexus handles it
Lost USB drive with student records
No local file exports needed — everything lives in role-gated cloud dashboards.
Shared spreadsheets via email / Google Sheets
Single source of truth in AiraNexus — no spreadsheet hand-offs, no version drift.
WhatsApp screenshots of fee or mark data
Parents see their own child only via authenticated app — no screenshots circulate.
Paper registers lost or damaged
100% digital with automatic backup — no single point of failure.
Weak or shared passwords among staff
Enforced strong passwords, mPIN, optional biometric, session timeout, force-logout on device change.
Data exposure when staff member leaves
Admin deactivates the account — access revoked instantly, all sessions invalidated.
Standards & compliance
Regular internal security reviews
Audit logs
DPDPA-aware
Indian data servers
Daily backups
Audit logs
Every action, accounted for.
Full immutable history — who changed what, when, and from where.
api.airanexus.in/admin/audit-logs
2026-04-29 09:14:32 IST[ADMIN] updated fee concession → student_id:1042 · ₹3,000
2026-04-29 09:08:11 IST[TEACHER] submitted attendance → class:6-A · 38 present
2026-04-29 08:55:47 IST[PRINCIPAL] approved leave → staff_id:204 · 2 days
2026-04-29 08:43:02 IST[PARENT] viewed report card → student_id:88 · Term 2 2026
2026-04-29 08:31:19 IST[ADMIN] reset staff password → staff_id:117 · via OTP
Whitepaper
Request our security whitepaper.
Detailed architecture, threat model, and compliance notes. Leave your email and our team will send it over.
Our team will email it to you. No spam.
Questions
Straightforward answers.
All data is stored on AWS infrastructure with servers located in the ap-south-1 (Mumbai) region. Your data never leaves India. Automated geo-redundant backups provide additional resilience.
No. Each role has a strict permission scope. A teacher sees only their assigned classes and their own leave records. Cross-teacher data is inaccessible at the API level — not just hidden in the UI.
Deactivating the account in AiraNexus instantly revokes all API tokens, invalidates active sessions across all devices, and blocks login. No shared passwords or stale access tokens linger.
We run internal security reviews after every major release and fix findings before shipping.
Critical security issues are triaged within 2 hours, with a root-cause analysis and fix deployed within 24 hours. Affected customers are notified within 4 hours of confirmation.