Your school's data is not a product.
Student records, fee data, and parent contacts are sensitive. Here's exactly how we protect them.
Per-Tenant Data Isolation
Every record belongs to a school, and every request is scoped to the signed-in user's school by a central tenancy layer, so one school's staff cannot open another school's records.
- Every record tagged to its school
- Central tenant scoping on every request
- Role-based permissions inside each school
Field-Level Encryption
Sensitive fields (student CNIC / B-Form, parents' CNIC, health records, staff CNIC and bank account numbers, 2FA secrets) are encrypted at the field level with AES-256. Even if someone accessed the raw database, they could not read these values.
- AES-256 field encryption
- Passwords hashed with bcrypt
- HTTPS/TLS in transit
Biometric Consent Controls
Face recognition is an optional module. It cannot be enabled without explicit written consent from parents. Biometric data is stored as mathematical vectors only, never raw photos.
- Opt-in only, off by default
- Parent consent form required
- Raw photos never stored
Data Retention & Right to Deletion
You can export your school's data on request. After cancellation, data is permanently deleted after the retention period in our Privacy Policy. We do not sell data to third parties.
- Data export on request
- Permanent deletion after retention period
- No data selling
Cloud Infrastructure on AWS
Skoo runs on AWS cloud infrastructure with automatic nightly database backups. Each school's records are scoped to that school and access is controlled by role.
- Hosted on AWS
- Nightly automatic database backups
- Role-based access control
Independent Security Review
We commission an annual penetration test from an independent security firm. The report summary is available to Pro plan customers on request.
- Annual pen test
- Report available on request (Pro plan)
- Findings tracked to closure
School data security, the Pakistani context.
A school management system holds some of the most sensitive data in the country: children's names, addresses, guardians' phone numbers, fee records, and health notes. Skoo treats that data accordingly — field-level encryption for sensitive columns, per-school data scoping so one school's users cannot see another school's records, and role-based access so a class teacher never sees the fee ledger.
Everything runs on AWS cloud infrastructure with nightly automatic backups and a full audit trail of who changed what. Biometric features like face recognition are opt-in with written parent consent, and store only mathematical embeddings, never photos. The audit trail records important changes so you can see who did what.
Questions about our security practices?
Our team is happy to walk you through our security model in detail.
Talk to our team