Enterprise-grade security
Your data — yours
Security is feature #1, not a checkbox.
Tenant isolation
Each school has its own MySQL DB.
TLS + at-rest encryption
HTTPS everywhere. Sensitive fields AES-256.
Auto-backups
Daily at 02:00 UTC. 30-day retention.
2FA + sanctum tokens
TOTP-compatible. Mandatory 2FA for admins.
Full audit log
Who, when, what. 90-day retention.
Infrastructure
Hetzner DC, DDoS protection, WAF.