✅ Our Security Commitment
We follow multi-layered protection covering servers, network, application, and user data.
🛡️ Server & Infrastructure Security
Our system is hosted on secure Linux cloud servers, protected using industry best practices:
- Secure Firewall Protection – Only essential services allowed
- Hardened Server Configuration – Root access disabled
- Encrypted Server Access (SSH Keys) – No plain passwords
- Automatic Security Updates – Constantly patched
🌐 Network & Communication Security
We ensure that all data transferred between users and our platform is protected.
- HTTPS Everywhere – SSL encryption protection
- TLS 1.3 Security Layer – Prevents data interception
- DDoS Protection – Traffic filtering
- Secure Content Delivery – Cloudflare reliability
💾 Data Security & Privacy
We treat your data with confidentiality—you own your data and it is never shared or sold.
- Encrypted Database Storage
- Secure Password Hashing (bcrypt)
- Database Access Control – No public access
- Daily Automated Backups
- Disaster Recovery Ready
👨🏫 User Protection
To prevent unauthorized access:
- Role-Based Access Control (RBAC) – Specific user roles
- Two-Factor Authentication (2FA) – Extra login security
- Login Monitoring – Suspicious activity detection
- Session Timeouts – Prevents unauthorized access
🛠️ Application Security
SchoolFix is built to resist modern cyber attacks.
- Protection Against SQL Injection
- Cross-Site Scripting (XSS) Protection
- Rate Limiting & Brute Force Defense
- Secure Code Review & Testing
✅ Compliance & Legal Protection
We adhere to the Kenyan Data Protection Act (2019) and follow GDPR-aligned policies.
| Data Ownership | Data belongs to the school |
| Privacy Protection | We never sell or share data |
| Right to Delete | Schools can request data removal |
| Security Disclosure | Responsible vulnerability handling |
🔄 Backup & Recovery
We keep your data available no matter what:
Daily Backups
Automatic daily backups
Encrypted Storage
Encrypted backup storage
Quick Recovery
Recovery within minutes
Version Protection
Version protection