Trust & safety
Security & data residency
Security is enforced at the server, not just the screen. Data travels encrypted, access is gated by role, every AI interaction is audited, and everything is hosted in India. Here is what that means in practice for a school evaluating the platform.
How is data protected in transit?
Data travels encrypted between the browser, the platform and its data services. Connections to the database and message services use TLS, and communication with AWS services is over HTTPS — so data in motion is protected end to end.
Who can see what?
Access is gated by server-enforced role-based access control. Students see their own work, teachers their classes, principals their school, and parents their own children. The rules are enforced on the server, so the boundary cannot be bypassed from the browser.
Is AI usage auditable?
Yes. A full audit trail records AI interactions, including the model used and the request, so a school has an accountable record of how the AI was used. This supports both oversight and any later due-diligence review.
Where is the data hosted?
In India. Hosting, databases and file storage run in the AWS Mumbai region (ap-south-1), so school and student data stays in-country. Vendor calls that leave the platform are limited to the five named subprocessors, each for a single purpose.
Security due diligence
We welcome security questionnaires — write to info@edvation.ai. The subprocessor list details every vendor and its purpose; formal policy documents are being finalised with counsel.
More in the Trust Centre
Edvation