Data security and privacy

Every school’s records are kept apart inside the database. The application connects with a restricted database role, and row-level security is enforced on every table, so a query without the right school context returns nothing.

Ten roles (admin, teacher, staff, student, parent, accountant, driver, transport in-charge, hostel in-charge and librarian) see only the modules and records their role allows. Modules also depend on the school’s plan.

Sensitive actions are written to an audit log, and administrators can review sign-in history and sign everyone out.

• Two-factor sign-in with an authenticator app (TOTP) and single-use recovery codes.
• Login attempts are rate-limited.
• Google or Microsoft single sign-on can be configured by a school; it stays off until then.

Aadhaar numbers are stored encrypted. Payment card details are handled by Razorpay and are not stored by Takshiva.

The product includes tools for consent records, data export and erasure for a student, a data-protection officer record and a breach log. The school is the data fiduciary; Takshiva acts as processor. Read the full Privacy Policy and Terms.

AI tools are inactive until a provider is connected. Personal details are redacted before text is sent, and staff approve AI output before it is used.

Email hello@takshiva.com.