Your school's data is precious. Inter-College is built from the ground up with security, privacy, and compliance as core design principles — not afterthoughts.
At Rest & In Transit
All data is encrypted using AES-256 at rest and TLS 1.3 in transit. Database backups are encrypted with separate keys. Sensitive fields like Aadhaar numbers and bank details use application-level encryption with per-tenant keys.
India's Data Protection Law
Inter-College is fully compliant with the Digital Personal Data Protection Act, 2023. We implement purpose limitation, data minimization, and provide tools for schools to manage consent and data subject requests from parents and students.
Audit in Progress
We are actively working toward SOC 2 Type II certification. Our security controls, monitoring, and incident response processes are designed to meet the Trust Services Criteria for security, availability, and confidentiality.
AWS Mumbai Region
Inter-College runs on Amazon Web Services (AWS) in the Mumbai (ap-south-1) region, ensuring data residency within India. We use auto-scaling, multi-AZ deployments, and containerized microservices for reliability and performance.
Never Lose a Record
Automated daily backups with point-in-time recovery capability. Backups are stored in a separate AWS region for geographic redundancy. Our disaster recovery plan ensures service restoration within 4 hours (RTO) with less than 1 hour of data loss (RPO).
Principle of Least Privilege
Every user in Inter-College has a specific role with precisely defined permissions. Principals, teachers, accountants, and parents each see only what they need. Multi-tenant architecture ensures complete data isolation between schools.
Beyond the six core pillars, here is what else we do to keep your data safe.
Automated dependency scanning, code analysis with SAST tools, and a responsible disclosure program for external researchers.
Background checks for all employees. Security awareness training quarterly. Access to production systems limited to senior engineers only.
Code reviews required for all changes. Automated test suites. Staging environment that mirrors production for pre-release validation.
CloudFront CDN and AWS Shield protect against distributed denial-of-service attacks. Rate limiting on all API endpoints.
All primary and backup data stored in AWS Mumbai region (ap-south-1). No data leaves India. Compliant with data localization norms.
24-hour incident response team. Documented runbooks for all critical scenarios. Post-incident reviews with root cause analysis shared with affected customers.
All data is stored in AWS Mumbai (ap-south-1) region. Backups are replicated to a separate AWS region within India. No data leaves the country.
Absolutely not. Inter-College uses a multi-tenant architecture with complete schema-level data isolation. Each school's data is stored in a separate database schema with no cross-access possible.
You can export all your data at any time in standard formats (CSV, Excel, PDF). Upon contract termination, we provide a complete data export and permanently delete all your data within 30 days, with written confirmation.
Yes. We implement all requirements of the Digital Personal Data Protection Act including purpose limitation, consent management, data minimization, and tools for handling data principal rights requests.
Yes. We conduct annual penetration testing through certified third-party auditors. We also run continuous automated vulnerability scanning and have a SOC 2 Type II audit in progress.
Join 500+ schools that trust Inter-College with their most sensitive data.