Data Security

Effective Date: 6/10/2026

At SchoolPilot Pro, safeguarding your educational and financial data is our highest priority. We employ a multi-layered approach to security, addressing infrastructure, application design, and operational protocols to ensure your school's information remains protected against unauthorized access, breaches, and data loss.

1. Infrastructure Security (Cloud Deployment)

For schools utilizing our Cloud version, we partner with industry-leading hosting providers (such as Hostinger / AWS):

• Data Centers: Our servers are hosted in secure, state-of-the-art data centers equipped with biometric access controls, 24/7 surveillance, and redundant power supplies.
• DDoS Protection: We utilize advanced threat mitigation networks to protect against Distributed Denial of Service (DDoS) attacks, ensuring high availability.
• Network Isolation: Database servers are strictly isolated within private virtual networks, inaccessible directly from the public internet.

2. Application-Level Security

Our software architecture is designed with security-first principles:

• Role-Based Access Control (RBAC): Administrators can define granular permissions. A teacher can only see their assigned class data, the accountant only sees financial records, and so on.
• Authentication & Passwords: We enforce strong password policies. Passwords are never stored in plain text; they are hashed using secure cryptographic algorithms (e.g., bcrypt).
• Session Management: Automatic session timeouts and secure cookie handling prevent unauthorized hijacking of active administrative sessions.

3. Encryption Engineering

Data confidentiality is maintained through robust encryption standards:

• In Transit: All communication between the user's browser, the SchoolPilot Pro servers, and third-party APIs (like 1LINK) is encrypted using TLS 1.2 or higher (HTTPS).
• At Rest: Critical data stored in our cloud databases is encrypted at the storage level to prevent data extraction from physical server breaches.

4. Backups and Disaster Recovery

Data loss prevention is a core pillar of our offering:

• Cloud Version: Automated, encrypted backups are executed daily. These backups are stored in geo-redundant locations separate from the primary application server.
• Desktop/LAN Version: We provide built-in, one-click backup utilities allowing school IT staff to securely export the database to external hard drives or local secure storage.

5. Compliance and Payment Security

When utilizing our digital fee collection modules, parents interact with bank-grade payment gateways authorized by the State Bank. SchoolPilot Pro never collects, processes, or stores sensitive raw payment credentials (such as credit card numbers, CVVs, or internet banking passwords). We only handle programmatic token identifiers and payment status webhooks.