Security

Secure by design.Student data protected.

eBodhya handles sensitive student and academic data. We take that responsibility seriously — through encryption, strict access control, data residency within India, and a clear commitment to never misuse student information.

Last updated: June 2026 ·  Questions? Write to contact@ebodhya.in

Security foundations

Six practices that define how eBodhya protects every school’s data.

Data Encryption

All data in transit is encrypted using TLS 1.2+. Data at rest is encrypted using AES-256. Student data and academic records are never transmitted or stored in plaintext.

Access Control

Role-based access ensures teachers see only their assigned classes, and administrators see only their school. No cross-institution data access is architecturally possible.

Data Residency

eBodhya stores all school and student data on servers located within India. We do not transfer academic records or personally identifiable information to international infrastructure.

Student Data Protection

Student data is used exclusively to power academic functions within eBodhya. We do not sell, share, or use student data for advertising, profiling, or any non-educational purpose.

Regular Audits

Security practices are reviewed regularly. Access logs are retained for audit purposes. Any unusual access patterns are flagged and investigated.

Institutional Agreements

Schools entering a formal relationship with eBodhya sign a data processing agreement that defines data ownership, retention, and deletion rights clearly.

Data practices

Clear answers to what eBodhya collects, what it does not, and what happens to data when a school leaves.

What data eBodhya collects

  • School profile information — name, board, academic calendar
  • Teacher accounts — name, email address, subject and class assignments
  • Student roster data — name, class, section, roll number (no email or contact required)
  • Assessment data — question papers, answer sheets, evaluation records, scores
  • Performance analytics — derived from assessment and evaluation data

What eBodhya does not collect

  • Student home addresses, contact numbers, or email addresses
  • Parent or guardian personal information
  • Financial or payment information beyond institutional billing
  • Biometric data of any kind
  • Device identifiers or tracking cookies from student interactions

Data retention and deletion

  • Academic records are retained for the duration of the institutional agreement
  • Upon contract termination, schools may request full data export before deletion
  • All school and student data is permanently deleted within 30 days of contract end
  • Deletion is irrecoverable — we do not retain backups beyond the agreed period
  • Schools may request data deletion at any time by contacting contact@ebodhya.in
AI & Student Data

How eBodhya’s AI handles student data

eBodhya’s AI processes academic data — answer sheets, question selections, performance records — to power evaluation and analytics within the platform. This processing is strictly functional and scoped to the school’s data.

Student data is never used to train external AI models, shared with third-party advertisers, or combined with data from other institutions. All AI inference happens within isolated, school-scoped data boundaries.

AI Data Commitments

Not used

Student data is not used to train shared or external AI models

Not sold

No student or academic data is sold to any third party

Not profiled

Students are not profiled, scored, or categorised outside of academic purposes

Scoped

AI processing is limited to the requesting school's data only

Auditable

All AI evaluations are reviewable and correctable by teachers

“We are accountable to schools. Student data belongs to the institution, not to eBodhya.”

Report a security concern

If you have identified a potential security vulnerability or data concern in eBodhya, please report it directly to our team. We investigate all reports and respond within two business days.

Report via Email

Related policies

Our Privacy Policy and Terms of Service define your rights and eBodhya’s obligations in full legal detail.