DPDP compliant. RLS at database level. Zero PII in logs. Built secure by architecture.
01 — ENCRYPTION IN TRANSIT & AT REST
Every communication between Klasso applications and our servers travels over TLS 1.3. Any attempt to use unencrypted HTTP is automatically rejected at the gateway level.
All databases, user credentials, and file assets are encrypted at rest using AES-256 cryptographic standards. Database storage blocks and automated snapshots are fully encrypted.
02 — ROW LEVEL SECURITY
Every table in the Klasso database is protected by Row Level Security (RLS) policies. Isolation is enforced at the PostgreSQL database engine layer using the school's unique tenant UUID.
This prevents application-level bugs from exposing data. A request from School A's parent is cryptographically blocked from ever reading School B's records, even if the API queries are modified.
03 — ZERO PII IN LOGGING
Our logging frameworks automatically scrub personally identifiable information (PII) before any entry is written to disk or sent to monitoring systems.
Student names, parent phone numbers, Aadhaar details, and transaction amounts are replaced with non-reversible UUID references. Our engineers analyze logs without viewing personal data.
04 — PAYMENT GATEWAY SECURITY
Klasso integrates natively with Razorpay for fee payments. We never store, process, or transmit sensitive payment instruments (credit card details, CVVs, netbanking passwords).
Payments are processed within Razorpay's secure SDK overlays.klass receives secure webhook confirmations to mark invoices as paid, keeping your school free from PCI audit liabilities.
05 — RESIDENCY & BACKUP POSTURE
To comply with data localization requirements, all core databases, user files, and application hosts are located entirely within the AWS Mumbai (ap-south-1) region.
Automated incremental backups run daily and are stored with a 30-day retention schedule. Cross-Availability-Zone database replication is maintained for instant disaster recovery.
06 — DPDP ACT & INCIDENT DESK
Klasso is built specifically for India's DPDP Act 2023. We provide native consent workflows for parents and one-click data portability exports for school administrators.
We maintain a dedicated incident response pipeline. Any security vulnerability disclosure or data concern can be reported directly to our incident desk at incident@klasso.in.