Skip to content

Security & Data

Enterprise-grade protection, and your data always stays yours

'scholina' is built for institutions that cannot afford to lose control of their records. Strong authentication, strict access control, tenant isolation, and full data ownership are part of the platform, not paid add-ons.

Your data is yours

Every student record, mark, fee entry, and document belongs to your institution. You can export your data at any time, and we never sell it or use it to train anyone else's product. If you ever leave, you take your data with you.

How we protect your institution

JWT authentication

Users sign in with short-lived access tokens and rotating refresh tokens. Access tokens are held in memory, never in local storage, so a stolen browser file cannot hand over an account.

Role-based access control

Every action is gated by granular, permission-based roles. A teacher sees their classes, an accountant sees finance, and an operator sees only their hub. People see exactly what their job requires and nothing more.

Multi-tenant data isolation

Each institution's data is scoped by a tenant identifier on every record and enforced on every query. One institution can never read or write another's students, fees, or results.

Automated backups

Your database is backed up automatically so records survive hardware failure or accidental deletion. Recovery does not depend on someone remembering to run a manual export.

Audit logs

Sensitive actions are recorded with who did what and when. Administrators get a clear trail for accountability, investigating disputes, and confirming that access controls are working.

Data ownership and export

You own your data and can export students, fees, results, and more whenever you need it. There is no lock-in and no ransom on your own records to get them back.

Zero-paper PDFs with QR verification

Receipts, report cards, certificates, admit cards, and payslips are generated as PDFs, archived, and stamped with a QR code so a printed copy can be verified as genuine against the original.

We describe only what the platform actually does today. We do not claim security certifications or compliance audits we have not completed. If a specific standard matters to your institution, ask us and we will tell you honestly where we stand.

See how we keep your institution's data safe

Join the founding program and get access while we build alongside early institutions.