Institutional Trust & Data Sovereignty

Security & Privacy Grounded in Verifiable Architecture

We understand that an institute’s question papers, faculty rubrics, and candidate answer scripts are valuable academic assets. Here is exactly how we protect them.

✓ Multi-Tenant Isolation✓ Zero Public LLM Training on Scripts✓ TLS 1.3 & AES-256 Encryption✓ Strict Faculty Override Controls

Section 1 • Implemented & Active Architecture

Verified Technical Safeguards

These controls are built into our codebase, operational infrastructure, and application middleware today.

Verified Implementation

Logical Multi-Tenant Data Isolation

Every coaching institute operates in an isolated logical tenancy layer. Application middleware extracts and validates tenant identities on every request, scoping database queries, Redis caching namespaces (`org_subdomain:` and `rl:org:`), and document storage to prevent cross-tenant data access.

Scoped database queries preventing accidental cross-tenant record leakage

Subdomain tenant verification and cryptographic host-header validation

Per-organization Redis caching partitions and rate-limiting buckets

Isolated question bank and private test series storage

Strict Privacy Boundary

Candidate Data Sovereignty & Zero Model Leakage

Candidate handwritten answer copies, internal evaluations, and proprietary institute study notes belong exclusively to the client institute. We do not use candidate submissions or evaluation feedback to train public foundation models.

Strict contractual barrier: zero unauthorized training on student scripts

Isolated evaluation context windows with ephemeral prompt processing

Data export and deletion requests fulfilled upon institutional contract completion

Zero secondary data commercialization or third-party marketing sharing

Cryptographic Standard

Cryptographic Controls: Transit & Rest

Modern cryptographic protocols safeguard all communications between student devices, faculty portals, and application infrastructure.

Enforced TLS 1.3 encryption across all public web traffic and internal service APIs

AES-256 encryption at-rest for database volumes, backups, and media artifacts

HttpOnly, Secure, and SameSite cookie tokens for authenticated sessions

Content Security Policy (CSP) and strict CORS origins protecting against injection

Verified Access Control

Granular Role-Based Access Control (RBAC)

Fine-grained permissions separate directorial oversight, academic administration, faculty grading workflows, and student access.

Pre-built roles: Institute Director, Academic Head, Faculty Evaluator, Batch Admin, Student

Faculty graders restricted to assigned batches and answer evaluation queues

Instant session termination and token revocation via distributed cache

Scoped admin controls preventing unauthorized batch or billing modifications

Accountability Trail

Operational Audit Logging

Administrative actions, score overrides, and membership changes are logged to maintain full institutional traceability.

Timestamped logs capturing evaluator adjustments and marks overrides

Tracking of batch reassignments, student enrollment, and credential updates

IP address and user agent recorded on sensitive operational events

Tamper-resistant audit trail available to institute directors

Transparent AI

Academic Provenance & Explainable Rubrics

Our answer evaluation is strictly grounded in official UPSC source material, eliminating arbitrary black-box grades.

Knowledge base anchored in sovereign documents (PIB, 2nd ARC, Union Budget, Supreme Court rulings)

Deterministic rubric scoring with exact paragraph-level feedback

100% human-in-the-loop: faculty members retain full override authority on every score

Clear distinction between factual corrections and structural improvements

Section 2 • Transparent Engineering Roadmap

Planned Governance & Certification Capabilities

In strict adherence to our core value of Evidence Over Assumptions, we do not claim unverified certifications, third-party audit stamps, or features currently in development. Here are the governance capabilities currently on our formal roadmap:

In Roadmap Review

Independent SOC 2 Type II Attestation

We are aligning internal controls with AICPA Trust Services Criteria to undergo formal third-party SOC 2 Type II examination.

Engineering Pipeline

Enterprise SAML 2.0 / Okta / Azure AD SSO

Single sign-on integration for universities and large coaching chains with centralized employee IdP management.

Enterprise Pilot Scope

Dedicated On-Premise / Geo-Pinned Hybrid Enclaves

Option for high-security public administration academies to pin data storage exclusively to designated physical regions or hybrid enclaves.

Our Responsible AI Principles for Education

We believe AI should empower educators, not replace pedagogical accountability. We do not manufacture rank guarantees or promise examination outcomes. Our tools are designed to structure preparation, accelerate evaluation turnarounds, and provide transparent insights supervised by professional faculty.

Book an Institutional Demo Read Our Core Values

For security inquiries, responsible disclosure, or compliance reviews: security@vishwadrishti.com