Tenant-isolated by design
Organization data is scoped by organization_id at every access layer. Individual Teacher data is never visible to any organization role.
Security, privacy & compliance
Designed to hold the weight of education data.
Encryption in transit and at rest. Strict data isolation between organizations. Super Admin cannot directly modify organization business records beyond the RBAC model.
Talk about governanceAccess controlPlatform → Org → Batch → Person
Organization tenant
Faculty
Department
Batch
Learner data
- Tenant isolated by organization_id
- JWT session security
- Auditable points & activation
The foundation underneath
Isolation, roles, and an audit trail.
High-severity risks in the product register are incorrect role access and cross-tenant leakage. Mitigation is RBAC plus tenant-scoped queries at every data-access layer.
Access follows responsibility
RBAC at platform, organization, faculty/department, batch/class and personal levels. Affiliated teachers only see assigned batches.
Activity has a trail
Onboarding approvals, activations, security-policy changes and points adjustments are logged with actor, timestamp and outcome.
Clear in the moments that count
Less uncertainty. More accountability.
Sessions
Token-based authentication
JWT or equivalent sessions across all personas. Organization Admins can configure session timeout. Temporary passwords are single-use and must be reset on first login.
Policy without redeploy
Feedback privacy
Tiered visibility
Feedback is stored against teacher, submitter and batch. Tiers: EtDUCATION, teacher, organization, public. Public visibility is disabled unless separately confirmed.
No public reviews by default
Minors
Elevated care for student data
Student and parent records are handled with elevated care. Specific child-data regulatory mapping is a compliance workstream to be finalized with legal stakeholders.
Parent sees only linked students
Questions about governance?
We will walk through isolation, RBAC and activation.
Discuss data isolation, points audit, session policy or organization onboarding directly with the team.