Security at MyPathsala
Your students’ data deserves serious care
Schools trust MyPathsala with information about children and families. Here is exactly how we protect it, in plain language.
Encrypted
HTTPS on every connection, and encrypted at rest.
Kept apart
No school can ever see another school’s data.
Backed up daily
Restorable to a point in time on managed cloud.
DPDP Act, 2023
Handled in line with India’s data protection law.
How we protect it
Six layers of protection
Built into MyPathsala from the first line of code, not added afterwards.
Encrypted everywhere
All traffic uses HTTPS. Data is encrypted at rest, and sensitive keys such as payment gateway secrets are encrypted again before they are stored.
Each school kept apart
Every record belongs to one school, and every request is checked against it. One school can never see another’s data.
Access by role
Principals, accountants, teachers and parents each see only what their role allows. Owners decide who gets which role.
Every change logged
Changes to students, fees, marks and settings are recorded with who made them and when.
Backups and uptime
Databases are backed up every day and can be restored to a point in time. The service runs on managed cloud infrastructure.
Protected sign-in
Passwords are hashed, sessions expire, and repeated failed attempts are slowed down. Parents sign in with one-time codes.
Access by role
Everyone sees their part, and nothing more
These are the starting roles. Owners decide who gets which role and can narrow or widen any of them.
Your rights
Your data, your rules
You own it
Your school’s data belongs to your school, not to us.
Export any time
Take your records out whenever you want, in standard formats.
See who did what
Every change is logged with the person and the time.
Delete when you leave
Close your account and, after a notice period, it is erased.
Privacy law in India
We handle personal data in line with the Digital Personal Data Protection Act, 2023. Schools remain responsible for the data they collect; MyPathsala processes it on their behalf and only for running the service. Our privacy policy explains what we collect, why, and the rights parents and staff have.
Read the privacy policyFAQ
Security questions
Who owns our school’s data?
Your school does. We process it only to run the service for you, we never sell it, and you can export it at any time.
Can your staff see our data?
Only when you ask us for help, and every time our team opens a school’s account it is recorded in the audit log.
What happens to our data if we leave?
You can export it first. After you close your account there is a notice period, then the data is deleted.
How do we report a security problem?
Email contact@mypathsala.com with “Security” in the subject. We respond to every report.
Free demo · no obligation
Questions about MyPathsala and your data?
Book a demo and ask our team anything, or write to us and we will answer in detail.
- 30 minutes, on video or phone
- Live in a day or two
- Help moving your data in
