Enterprise Security & Tenant Isolation Architecture
How Classegy safeguards sensitive academic records, financial transactions, and student biometrics for high-volume campuses and multi-branch networks.
PostgreSQL Tenant Isolation
Every school tenant is isolated using strict schema partitioning and Row-Level Security (RLS). Cross-tenant queries are blocked at the database engine level.
AES-256 & TLS 1.3 Encryption
All stored records, report cards, and fee ledgers are encrypted at rest using AES-256. Web and mobile communications are strictly enforced with TLS 1.3.
Granular Dynamic RBAC
Define custom permissions for over 15+ campus roles (Super Admin, Principal, Accountant, Warden, Teacher, Parent). Session tokens expire dynamically with MFA support.
You Decide Where Your School Data Lives
Classegy gives educational trusts and school boards complete autonomy over data residency, infrastructure hosting, and database ownership. Everything from your student records to fee receipts and attachments belongs 100% to you.
Classegy Managed Cloud
Turnkey, zero-DevOps deployment. Managed high-availability infrastructure with automatic backups, geo-redundancy, continuous security patching, and 99.9% uptime SLA.
- Zero server management required
- Automated hourly backups & snapshots
- Instant provisioning for new terms
Dedicated Regional VPC
An isolated cloud cluster provisioned exclusively for your school network in your jurisdiction of choice (India, UAE, Saudi Arabia, Europe, US, or Singapore).
- Guaranteed in-country data residency
- Physically isolated compute & storage
- Custom domain & dedicated IP
Your Own Infrastructure
Run Classegy with the database and object storage residing directly inside your institution's private AWS, Azure, GCP, or on-premise servers.
- 100% database & file storage ownership
- You hold master KMS encryption keys
- Direct read-replica access for internal BI
You own all student profiles, fee transaction ledgers, grades, biometric hashes, and document attachments. We never monetize, analyze, or claim rights to your institution's data.
Export complete relational database dumps and file archives anytime with a single click or automated API sync. If you ever leave, your data remains fully intact in standard formats.
Enterprise campuses can bring their own Customer-Managed Encryption Keys (CMEK). Even infrastructure administrators cannot decrypt your student files without your authorized key.
Tri-Mode Zero-Friction Campus Access
Explore how QR code scanning, WhatsApp OTP, and institutional SSO safeguard access for all campus roles.
Interactive Portal Login Experience
Explore how teachers, parents, students, and trustees access Classegy across 3 modern login modes.
Point Classegy Mobile App at this QR code
Auto-refreshes every 45 seconds for security
Instant Desktop Access Without Typing Passwords
Faculty, accountants, and campus trustees who are already logged into the universal Classegy iOS/Android app can instantly log into any desktop browser by scanning the dynamic on-screen QR code.
Infrastructure & Disaster Recovery Benchmarks
Comparing Classegy modern cloud architecture against legacy school ERP servers
| Security Parameter | Classegy Cloud Standard | Legacy On-Premise / Monolith |
|---|---|---|
| Backup Frequency | Automated hourly snapshots + geo-replication | Manual weekly dumps on physical hard drives |
| Tenant Data Separation | Database Row-Level Security (RLS) schemas | Shared tables with vulnerable single-column IDs |
| Recovery Time Objective (RTO) | < 15 minutes automated failover | 24 to 72 hours manual server reboot |
| Biometric Template Storage | One-way SHA-256 irreversible hashes only | Unencrypted raw image files on local PC |
Request Institutional Security Whitepaper & SOC2 Brief
Our infrastructure engineering team can provide your IT committee with complete architecture diagrams and compliance certificates.