Your students' data is
safe. Always.
EduAnant is built with security at its core — not as an afterthought. Here's what that means for your school's data, in plain language.
Granular permission keys
On your own server
Third parties with access
Security at a glance
Verified against the Release 1.4.0 build
9 controls · every EduAnant deployment
Role-Based Access Control
Every staff member in EduAnant sees only what their role allows. A teacher never sees fee records. An accountant never touches exam marks. Access boundaries are strictly enforced — at both the screen and data level.
- Separate roles for Admin, Teacher, Accountant, Parent/Student
- 96 individual permissions across 22 permission groups
- Tune any single permission per staff member, not just per role
- Create custom roles for your school's own designations
- Cannot bypass restrictions via URL or direct navigation
- Role and permission changes take effect immediately
Two-Factor Login & Session Management
Every login is authenticated through a secure, industry-standard session system, with optional two-factor authentication from any authenticator app. Sessions expire automatically and are invalidated the moment a user logs out or their role changes.
- Optional two-factor authentication (authenticator app)
- Inactivity timeout configurable per role
- Forced password reset on first login
- Sessions invalidated immediately on logout or role change
- Rate limiting on login, OTP and password reset
Immutable Audit Trail
Every action performed inside EduAnant is logged — who did it, when, and on which record. These logs cannot be modified or deleted by anyone, including the school admin. Critical for accountability and compliance.
- Every action logged with timestamp and user identity
- Tamper-proof — no one can edit or delete logs
- Filterable audit history for administrators
- Supports accountability across all staff roles
Your Data, Your Server
Unlike cloud-based software, EduAnant runs entirely on your own server or computer. Your student data never leaves your premises. You own it completely — no vendor can access, sell, or lock you out of it.
- Runs on your own server or VPS — not a shared cloud
- Your database, your hardware, your control
- No third party can access your school's data
- Complete data ownership and sovereignty
Encrypted Communication
All communication between the browser and your server is encrypted. No data travels in plain text. Passwords are never stored as readable text — they are protected using industry-standard security practices.
- All traffic encrypted in transit
- Passwords stored using industry-standard hashing
- Secure communication enforced in production
- No sensitive data stored in plain text
Input & API Protection
Every piece of data entering EduAnant is validated before it's processed. Built-in protections guard against common attack vectors. Repeated failed login attempts are automatically blocked.
- All inputs validated before processing
- Protection against injection and manipulation attacks
- Brute-force login protection
- Controlled access policies for external communication
Automatic Backup Before Every Update
Before any software update is applied, a complete backup of your school data is automatically created. If anything goes wrong, you can restore everything in minutes. Zero risk to your data.
- Full data backup created before every update
- Stored securely on your own server
- Restore in minutes if needed
- No update applies without a backup being confirmed
Sensitive Data Encrypted & Masked
Aadhaar, PAN, and bank account numbers on staff records are encrypted in the database and masked on screen by default. Revealing one is a deliberate, permission-gated action — and every reveal is written to the audit trail with the name of whoever asked for it.
- Aadhaar, PAN & bank details encrypted at rest
- Masked on screen unless explicitly revealed
- Reveal requires a separate permission
- Every reveal recorded in the audit trail
Privacy by Design
EduAnant does not collect, share, or use your school's data for any purpose beyond running your software. No advertising. No analytics sent out. No third-party integrations with access to your student records.
- No usage data or telemetry sent externally
- No advertising or third-party tracking
- Student data never used for any other purpose
- Designed to respect Indian school data privacy norms