Security

Student data kept like it matters — because it does

A school holds children’s records, families’ payments and staff salaries. Akshara keeps each school apart, opens to each person only what their role allows, asks for more than a password where the school wants it, and remembers every change.

Two-step sign-in · Ramesh Adhikari
Authenticator app
Set up
Passkey · Galaxy A55
Set up
Recovery codes
8 left
Required by the school

र · 01

Each school on its own

Every school’s data lives in a database of its own, never mixed with another school’s. Akshara runs in our cloud, where Akshara Labs hosts and looks after it, or on the school’s own server — and its files are opened only by the people allowed to see them.

  • A database of its own for every school
  • Our cloud, or your own server
  • Files opened only by the people allowed to see them
Greenfield Academy · where its data lives
Database
Its own
Hosting
Akshara Labs cloud
Files
The school’s own storage
Licence
Signed, by module

र · 02

Roles that open only what each person needs

Each role is given permissions one by one — to see invoices but not to change them, to enter marks but not to publish results — and the menu shows each person only what their role opens. Teachers see their own classes; parents see only their own children.

  • Permissions down to each action: view, add, change, approve
  • A menu for each role, renamed and reordered as the school likes
  • Teachers limited to their classes; parents to their children
Role · Accountant
Invoices
View, generate
Payments
Take, reverse with approval
Payroll
Run, not approve
Exams
—

र · 03

More than a password, where you want it

The school sets its own password rules — the shortest password, how many wrong tries lock an account, how long a reset link works. People can sign in with a one-time code emailed to them instead of a password, and two-step sign-in with an authenticator app or a passkey can be required for everyone. The phone app opens with a fingerprint or face.

  • The school’s own password and lock rules
  • One-time codes by email, as an alternative to the password
  • Two-step sign-in: authenticator apps, recovery codes and passkeys
  • Fingerprint or face on the phone after time away
Sign-in settings
Shortest password
8 characters
Locks after
5 wrong tries
Emailed codes
On · work for 10 minutes
Two-step sign-in
Required for everyone
Passkeys allowed

र · 04

A second person for the changes that matter

The school chooses which actions need a second person’s approval — reversing a payment, changing a salary, posting a large journal entry. The request waits with the school’s approvers, who approve it, reject it, or send it back with a note.

  • The school picks the actions that need approval
  • Approver groups: who may approve what
  • Approve, reject or return — with the reason kept
Waiting for approval
Reverse payment RCP-0412
Asked by Laxmi Tamang
Salary change · 2 staff
Asked by the HR office
Journal entry · रू4,20,000
Asked by Accounts
3 waiting

र · 05

Every change remembered

The activity log shows who signed in and what they added, changed or removed. The audit log shows what a record held before and after each change, and who made it. Everyone can see their own activity.

  • Who signed in, and what they did
  • Before and after, for every change to a record
  • Each person’s own activity, for themselves
Audit · Invoice INV-2083-0412
Changed by
Laxmi Tamang
When
29 Ashwin 2083, 14:12
Discount
रू0 → रू845
Reason
Sibling discount

र · 06

Phones and sessions under control

Each person sees the phones signed in to their account; the office can sign out a lost phone, or someone everywhere at once. Changing a password signs out every other phone and browser, and a phone left unused for the school’s number of days asks for the password again.

  • Phones signed in, listed for each person
  • A lost phone signed out from the office
  • Sign out everywhere, in one step
  • Unused phones asked for the password again
Phones signed in · Ramesh Adhikari
Galaxy A55
This phone · fingerprint
iPhone 13
Last used 12 Ashwin
Redmi Note 13
Last used 2 Ashwin
Sign out everywhere

र · 07

An assistant that can’t see more than you can

The AI assistant answers from the school’s data through fixed, read-only questions, and only within what the person asking may see. It cannot change anything, and the school chooses which AI service answers it — or switches it off.

  • Read-only: it looks, it never changes
  • Within each person’s own permissions
  • The AI service chosen by the school, or none
AI assistant · settings
Switched on
Yes
Answers from
The school’s data, read-only
Service
Chosen by the school
Who can use it
Staff and parents

Ask us anything about how your data is kept

Where it lives, who can see it, how it is backed by sign-in and approvals — we will walk your board or auditor through it.