Your school's data, kept safe

Fees, marks, phone numbers and Aadhaar are trusted to us by schools and parents. This page explains, in plain words, how Skoolnix protects them.

🏫Where your data lives

  • Each school has its own database on its own website address — one school can never see another school's data.
  • Every school site runs on HTTPS (padlock), on managed cloud hosting.
  • Code folders, backups and settings files are blocked from the internet.

💾Backups

  • Automatic backup every day; the newest 10 are kept.
  • A password-locked (AES-256) copy is emailed every day to an address the school chooses — a copy away from the server.
  • Skoolnix checks that the latest backup can really be restored, and System health turns red if a backup is missing.
  • The school can download a backup or restore one at any time (Super Admin only).

🔐Who can see what

  • Roles & permissions decide every screen and right — view, add, edit, delete, discounts, part payment, late fine.
  • Parent and student mobile numbers and Aadhaar are masked for roles that do not need them.
  • A parent sees only their own children; a teacher works only in their own classes and subjects.
  • Audit trail: every change is recorded with who, when, and the old and new value.

🛡️Safe sign-in

  • Passwords are stored only as strong one-way hashes — nobody can read them.
  • Too many wrong passwords block that sign-in for a while; a captcha stops robots.
  • Two-step verification (OTP on email / WhatsApp / SMS) can be switched on for staff.
  • Every form is protected against forged requests (CSRF), and browser security headers (CSP, HSTS, frame protection) are on.

💳Payments

  • Card, UPI and net-banking details are entered on the payment gateway (Razorpay, Easebuzz and others) — Skoolnix never sees or stores card details.
  • Every online payment is re-checked with the gateway every few minutes, so no payment is lost or counted twice.
  • Only allowed roles can give discounts, take part payments or reduce a late fine.

✅Updates you can trust

  • Every update and licence is digitally signed; a school site refuses anything not signed by Skoolnix.
  • Each release is tested with an automated security scanner (Wapiti) for SQL injection, cross-site scripting, file and command injection before it goes out.
  • Updates keep the school's data and settings, and a backup of replaced files is kept.

📜Privacy (DPDP Act 2023)

  • A clear privacy notice for parents, with their choices, before they use the portal.
  • Privacy & data requests: see, correct or delete data on request; a named Grievance Officer.
  • Data is used only to run the school; Skoolnix does not sell or share it for advertising.

🤝Our promise on access

  • Skoolnix staff open a school's data only to fix a problem the school has asked us to fix.
  • The school owns its data and can take a full copy at any time.

Checked by independent tools

A+securityheaders.com — grade A+Live school site running Skoolnix (aparnapublicschool.in) · October 2026 · click to see the live report A+Qualys SSL Labs — grade A+HTTPS of the same school site, on all four servers · October 2026 · click to see the live report

Every browser security header is in place: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Strict-Transport-Security, Permissions-Policy and Content-Security-Policy. Login cookies are Secure, HttpOnly and SameSite. The HTTPS connection gets the top grade from Qualys SSL Labs.

Found a security problem?

Please write to skoolnix@gmail.com with the subject Security report and the steps to see the problem. Please do not test on a real school's site and do not look at other people's data. We reply within 3 working days and fix real problems as fast as we can. Our contact details are also in security.txt.

Questions from your school's IT team?Ask us on WhatsApp