Security & Data Protection

Schools trust Takshiva with sensitive student, staff, and financial data. Here is how we protect it.

Data isolation

Takshiva is multi-tenant with strict per-school data isolation — every record is scoped to its school at the database and application layer, so no school can ever see another school's data.

Access control

• Role-based access — admins, principals, accountants, teachers, parents and students each see only what their role permits.
• Audit logs — sensitive actions are recorded for accountability.
• Bearer-token authentication; passwords stored using industry-standard hashing (never in plain text).

Encryption

All traffic is served over HTTPS/TLS. Payment credentials are handled entirely by our PCI-DSS-compliant gateway partner — Takshiva never stores card or full UPI credentials.

Hosting & residency

Data is hosted on secured servers in India. For schools that require it, Takshiva can also be deployed on-premise on your own server for full control over your data.

Backups & reliability

Regular automated backups protect against data loss. We monitor uptime and apply security updates promptly.

Data ownership & portability

Your data is yours. You can export your data at any time, and on ending a subscription we provide a full export before deletion (see Privacy Policy).

Compliance

We handle personal data in line with India's Digital Personal Data Protection Act, 2023. The School is the Data Fiduciary; Takshiva is the Processor acting on its instructions.

Report a vulnerability

Found a security issue? Please email hello@takshiva.com and we will respond promptly.