MyEduOS — AI-Powered Campus Operating System
HomeTrust & Legal CenterRegulatory Compliance
Official MyEduOS Policyv2.6 EnterpriseEffective Academic Year 2026–27

Regulatory Compliance

How MyEduOS aligns with educational board mandates, child data privacy regulations, tax requirements, and cloud sovereignty.

Document ID: EDU-GOV-REGULATORY-COMPLIANCELast revised: October 24, 2026
DPDP Act 2023Statutory Law

Child Data Protection

Mandatory guardian consent verification, zero minor behavioral profiling, and strict purpose limitation.

CBSE & ICSE Bye-LawsAffiliation Standards

Board Governance

Compliant marks registers, CCE grading rules, permanent student registers, and QR-verifiable Transfer Certificates.

PCI-DSS SAQ-AFinancial Standard

Payment Security

Tokenized checkout with Razorpay. MyEduOS servers never touch, process, or store payment card details.

Data Sovereignty100% In-Country

India Cloud Residency

Primary databases and student file archives hosted in Tier-4 data centers within Mumbai & Hyderabad regions.

1. Child Data Protection (DPDP Act 2023)

The Digital Personal Data Protection Act, 2023 sets stringent safeguards for processing the personal data of children (individuals under 18 years of age). MyEduOS helps schools adhere to these requirements by design:

  • Verifiable Guardian Consent: Our admissions and enrollment workflows require verifiable parental or guardian authorization before student profiles are created.
  • No Behavioral Tracking of Minors: MyEduOS does not track student browsing habits across websites, does not build commercial behavioral profiles, and prohibits third-party advertising on all portal screens.
  • Purpose Limitation: Student information collected within the platform is utilized exclusively for educational administration, safety, assessment, and parent-school communication.
  • Grievance Redressal Mechanism: Integrated self-serve privacy tools allow guardians to review stored data, request corrections, or escalate inquiries directly to the institution’s Data Protection Officer.

2. Educational Board Affiliation Standards

MyEduOS meets the administrative and documentation mandates stipulated by major educational boards:

Regulatory BodyKey Regulatory RequirementMyEduOS Built-in Capability
CBSE Affiliation Bye-Laws
Central Board of Secondary Education
Permanent digital records of admission, withdrawal, attendance registers, and academic progress reports.Immutable student ledger, attendance logging, CCE grading support, and automated report card generators.
ICSE / CISCE Standards
Council for Indian School Certificate Exams
Continuous assessment record-keeping, terminal exam mark tabulation, and standardized transfer certificates.Tamper-evident Transfer Certificates (TC) with public QR code cryptographic verification (/verify).
State Education Directorates
State Primary & Secondary Departments
Biometric student & staff attendance reporting, pupil-teacher ratio monitoring, and scholarship category tracking.Biometric RFID punch synchronization, teacher subject allocations, and customizable student tag filters.
NEP 2020 Guidelines
National Education Policy
Holistic Progress Card (HPC) and multi-disciplinary academic tracking.Multi-term assessment matrices supporting qualitative teacher remarks and co-curricular feedback.

3. Financial, Banking & Tax Compliance

Fee processing and accounting within MyEduOS adhere to strict financial regulations:

  • PCI-DSS SAQ-A Compliance: Online fee payments processed via Razorpay utilize client-side tokenization and direct bank redirect flows. MyEduOS never handles, stores, or transmits credit/debit card numbers or CVVs.
  • GSTIN Invoice Compliance: Fee invoices generated by MyEduOS include customizable organization GSTIN numbers, state codes, and educational service SAC/HSN classification codes.
  • Bank Cheque Reconciliation: Built-in clearance workflows track cheque deposit dates, clearance status, and bounce adjustments to prevent accounting discrepancies.

4. Data Sovereignty & Cloud Residency

All production database volumes, primary compute instances, and document storage buckets for Indian institutions are hosted in tier-4 cloud facilities located physically within the Republic of India (Mumbai / Hyderabad regions).

This ensures compliance with national data localization mandates and guarantees that student and institutional records remain within sovereign jurisdiction.

5. Security Framework Roadmap

MyEduOS is built in alignment with the core controls of ISO/IEC 27001:2022 (Information Security Management) and SOC 2 Type II Trust Services Criteria (Security, Availability, and Confidentiality).

Institutions requiring specific compliance questionnaires or vendor risk assessments for their board of trustees can request our technical security package by contacting compliance@myeduos.com.

Need a custom Data Processing Agreement (DPA)?

Enterprise educational networks, state boards, and multi-campus trusts can request tailored DPAs.