Data security at Skolzo

How we protect school data

Skolzo is built for Indian schools handling student and parent personal information. We combine tenant isolation, encrypted transport (HTTPS), encrypted integration secrets, role-based access, and immutable audit logs.

Trust center (in-app)

After signup, institution admins on Premium or Enterprise plans can open the trust center in CRM or ERP to review audit events, run access reviews, manage retention policies, and export compliance bundles.

Data subject requests

School admins can log access, correction, and erasure requests with identity verification — supporting DPDP-aligned workflows for leads and students.

What we do not claim

Skolzo does not currently hold SOC 2 or ISO 27001 certification. We do not guarantee India-only data residency unless your deployment contract specifies it.

Security by plan

• Tenant isolation

  All plans

  Each school’s data is scoped by institution. Staff only see records for campuses and roles they are assigned to.

• Role-based access & PII masking

  All plans

  Granular permissions control who can view full contact details. Counselors see masked phone and email unless granted PII access.

• Audit trail

  All plans

  Every call, message, and status change on leads, users, students, and payments is logged for managers and compliance reviews.

• Trust center & compliance exports

  Premium & Enterprise

  Download audit logs, consent records, and data exports for CBSE accreditation or internal access reviews — from the in-app trust center. Includes DPDP data subject request workflow.

• Two-factor authentication (TOTP)

  All plans (org mandate: Enterprise)

  Every staff member can enable authenticator-app MFA on their account. Enterprise plans can require MFA for all admins or all users.