EdSys

Security and data

Where a learning center's data is stored

A protected data center, backups every night, each center's data isolated. When you leave, you can get it and have it deleted.

Start for freePrivacy policy
  • HTTPS everywhere
  • Backups every night
  • Data belongs to the center
Where the servers are
A data center in a country from the adequate personal data protection list
Passwords and login
No passwords in the database, only hashes: a leak would not reveal them. Guessing is limited to 30 attempts a minute, a session lives 15 minutes
Database backups
Every night; 7 daily and 4 weekly copies are kept
Center archive
Every night: the organization's data and files
Access rights
75 permissions, 6 roles and custom roles with exceptions
After a center is deleted
30 days to return, then deletion

How data is protected

Six rules you can see in the system

01 · Servers

Servers protected by law

The application and the database run in a professional data center. The storage country is on the list of states with adequate personal data protection under Uzbekistan law, so student and employee data may be stored there.

02 · Backups

Backups every night

The database is copied every night: 7 daily and 4 weekly copies are kept. Separately, every night an archive of each organization is assembled, its data and uploaded files, so both the whole system and one specific center can be restored.

03 · Isolation

Isolation per center

Every request in the system runs on behalf of an employee of a specific organization and sees only its data. Several centers in one account are separated as strictly as strangers.

04 · Access

Roles and rights

75 permissions are grouped by section: a teacher does not see finance, a manager does not see others' reports. Besides six ready roles you can build your own, including per branch, and set personal exceptions for individual employees. Passwords are stored only as hashes.

05 · History

Action history

Attendance marks, homework checks, grades and accepted payments are stored with the author and time. Logins and an employee's actions for the last 30 days are visible in their card.

06 · Ownership

Your data is yours

Reports export to CSV right from the system, and the full center archive with data and files is provided on request; it is assembled every night anyway. When leaving, a center can request deletion: the data is kept for another 30 days in case of return, then deleted together with backups on schedule.

Frequently asked questions

Why are the servers not in Uzbekistan?
We chose a professional data center abroad for reliability and infrastructure protection. The storage country is on the list of states with adequate personal data protection, so such storage complies with the Uzbekistan law on personal data. The provider and the country are named in the privacy policy.
How often are backups made?
The database every night, keeping 7 daily and 4 weekly copies. Each organization's archive with files is also assembled every night.
Who owns student data?
The center. EdSys processes it on the center's behalf to run the system and does not use it for advertising or share it with third parties.
Can a teacher see finance?
Not unless their role has that permission. Permissions are granted by section, and exceptions can be set for individual employees.
What happens to the data if we leave?
Reports export to CSV from the system, and the full center archive with data and files is provided on request. If you wish, you request deletion: the data is kept for 30 days, then deleted.
How does login work?
With a login and password; passwords are stored only as hashes, guessing is limited to 30 attempts a minute. Students and parents log in by phone number. A session lives 15 minutes and renews automatically, all connections go over HTTPS.

Bring order to your center

Leads, schedule, gradebook and money under control from day one. Start for free.

Start for freeLog in