Child Data Protection
Mandatory guardian consent verification, zero minor behavioral profiling, and strict purpose limitation.
Board Governance
Compliant marks registers, CCE grading rules, permanent student registers, and QR-verifiable Transfer Certificates.
Payment Security
Tokenized checkout with Razorpay. MyEduOS servers never touch, process, or store payment card details.
India Cloud Residency
Primary databases and student file archives hosted in Tier-4 data centers within Mumbai & Hyderabad regions.
1. Child Data Protection (DPDP Act 2023)
The Digital Personal Data Protection Act, 2023 sets stringent safeguards for processing the personal data of children (individuals under 18 years of age). MyEduOS helps schools adhere to these requirements by design:
- Verifiable Guardian Consent: Our admissions and enrollment workflows require verifiable parental or guardian authorization before student profiles are created.
- No Behavioral Tracking of Minors: MyEduOS does not track student browsing habits across websites, does not build commercial behavioral profiles, and prohibits third-party advertising on all portal screens.
- Purpose Limitation: Student information collected within the platform is utilized exclusively for educational administration, safety, assessment, and parent-school communication.
- Grievance Redressal Mechanism: Integrated self-serve privacy tools allow guardians to review stored data, request corrections, or escalate inquiries directly to the institution’s Data Protection Officer.
2. Educational Board Affiliation Standards
MyEduOS meets the administrative and documentation mandates stipulated by major educational boards:
| Regulatory Body | Key Regulatory Requirement | MyEduOS Built-in Capability |
|---|---|---|
CBSE Affiliation Bye-Laws Central Board of Secondary Education | Permanent digital records of admission, withdrawal, attendance registers, and academic progress reports. | Immutable student ledger, attendance logging, CCE grading support, and automated report card generators. |
ICSE / CISCE Standards Council for Indian School Certificate Exams | Continuous assessment record-keeping, terminal exam mark tabulation, and standardized transfer certificates. | Tamper-evident Transfer Certificates (TC) with public QR code cryptographic verification (/verify). |
State Education Directorates State Primary & Secondary Departments | Biometric student & staff attendance reporting, pupil-teacher ratio monitoring, and scholarship category tracking. | Biometric RFID punch synchronization, teacher subject allocations, and customizable student tag filters. |
NEP 2020 Guidelines National Education Policy | Holistic Progress Card (HPC) and multi-disciplinary academic tracking. | Multi-term assessment matrices supporting qualitative teacher remarks and co-curricular feedback. |
3. Financial, Banking & Tax Compliance
Fee processing and accounting within MyEduOS adhere to strict financial regulations:
- PCI-DSS SAQ-A Compliance: Online fee payments processed via Razorpay utilize client-side tokenization and direct bank redirect flows. MyEduOS never handles, stores, or transmits credit/debit card numbers or CVVs.
- GSTIN Invoice Compliance: Fee invoices generated by MyEduOS include customizable organization GSTIN numbers, state codes, and educational service SAC/HSN classification codes.
- Bank Cheque Reconciliation: Built-in clearance workflows track cheque deposit dates, clearance status, and bounce adjustments to prevent accounting discrepancies.
4. Data Sovereignty & Cloud Residency
All production database volumes, primary compute instances, and document storage buckets for Indian institutions are hosted in tier-4 cloud facilities located physically within the Republic of India (Mumbai / Hyderabad regions).
This ensures compliance with national data localization mandates and guarantees that student and institutional records remain within sovereign jurisdiction.
5. Security Framework Roadmap
MyEduOS is built in alignment with the core controls of ISO/IEC 27001:2022 (Information Security Management) and SOC 2 Type II Trust Services Criteria (Security, Availability, and Confidentiality).
Institutions requiring specific compliance questionnaires or vendor risk assessments for their board of trustees can request our technical security package by contacting compliance@myeduos.com.
