Security is not a feature.
It's the core chassis.
Because EduPhylax handles institutional money, child demographics, and permanent academic records, we engineered the platform around defense-in-depth principles. Your data is sovereign, isolated, and cryptographic.
Absolute Tenant Isolation (RLS)
Unlike legacy SaaS platforms where data is mingled, we use strict Row-Level Security (RLS) within our single-database architecture. Every query is scoped to the specific school tenant ID at the database engine level. School A can never, under any circumstances, query or access School B's records, staff lists, or financial data.
Encryption at Rest & In Transit
Sensitive student demographic and financial data is encrypted at rest using AES-256 and in transit using TLS 1.3 across all sub-domains. We treat academic records with the exact same rigor as financial ledgers.
Immutable Audit Logs
Internal fraud and accidental deletions destroy trust. In EduPhylax, every mutating action—from extending a fee discount, to editing a test score, to releasing a term result—is permanently logged with a timestamp, IP address, and actor ID.
Sub-domain Sovereignty & DNS
Every institution demands its own identity. We provision a fully isolated sub-domain portal (e.g., kingscollege.eduphylax.com) routing through edge networks. Parents interact exclusively with a dedicated, authenticated school domain.
Secure Authentication
User credentials are one-way hashed using modern Argon2 algorithms. Not even our database administrators can retrieve a user's raw password.
Strict Role-Based Access Control
Granular permissions separate the Proprietor, Principal, Accountant, and Admin Staff. An Admin cannot approve fee discounts, and an Accountant cannot edit academic records.
Review our Data Processing Addendum
We provide full transparency into our infrastructure, data hosting locations, and compliance certifications. Large institutions and multi-campus networks can request our detailed security whitepaper.
Contact our Security Team