Skip to content
UnoCampus

Security and privacy

Built so the right people see the right records.

School data is personal data — children's records, family contact details, staff payroll. These are the controls that decide who reaches what, and how that access is recorded.

  • Role-based access

    People see and do only what their role permits. A teacher marking attendance does not reach fee collection, and a receptionist capturing enquiries does not reach staff payroll.

  • School isolation

    School operational data is scoped to the correct school. In a multi-school group, each school's records stay within that school unless a role is explicitly granted a wider view.

  • Audit trail

    Important changes can be traced to the user who made them, the time they were made and the originating IP address, so a question about a record has an answer.

  • Document protection

    Private files are not served from public URLs. They are accessed through authorised, short-lived links generated for a permitted user at the moment they open the document.

  • Authentication

    Password authentication with an OTP foundation and session controls, so access can be granted, reviewed and withdrawn as staff join and leave.

  • Data privacy

    The platform is built with the Digital Personal Data Protection Act, 2023 as a design objective. Our privacy policy sets out what is collected, why it is held and how long it is kept.

Access control

Permissions restrict, not just grant.

A teacher marking attendance does not reach fee collection. A receptionist capturing enquiries does not reach staff payroll. The permission matrix is configured during onboarding and adjusted whenever a role changes.

  • Each role is granted only the permissions it needs, and permissions are reviewed as staff join and leave.
  • Operational data is scoped to the correct school, including for groups running several schools.
  • Changes to important records are written to an audit trail with user, timestamp and originating IP.
  • Private documents are served through short-lived authorised links rather than public URLs.
  • Sessions can be reviewed and ended, and passwords are supported by an OTP foundation.
  • The platform is designed with the Digital Personal Data Protection Act, 2023 as an objective.
app.unocampus.in/school/settings/roles

What we do not claim

We do not describe the platform as “100% secure”, “bank-grade” or “fully compliant” with the Digital Personal Data Protection Act, 2023. No system is absolutely secure, and compliance is an ongoing obligation rather than a badge. What we will do is explain exactly which controls exist, show them to your team during the demo, and answer a security questionnaire in writing.

Our privacy policy sets out what is collected, why it is held and how long it is kept.

Want the security detail in writing?

Book a demo and we will walk your team through access control, audit logging and document handling on your own data model.

Talk to an expert

Already a customer? Login