Data Security

1. Our Commitment

At HBA Compass, protecting the data of students, teachers, and families is our highest priority. We apply industry-standard security practices across every layer of our infrastructure.

We continuously review and improve our security posture. This document outlines the technical and organisational measures we have in place to keep your data safe.

2. Encryption & Transport Security

All data stored in HBA Compass is protected using standard encryption at rest provided by managed database infrastructure. This ensures that stored database volumes are safeguarded against unauthorized physical access.

All data in transit between your browser and our servers is protected using TLS 1.2 or higher. We enforce HTTPS across all endpoints and do not allow unencrypted connections.

3. Access Controls & Multi-Tenancy

HBA Compass uses strict role-based access control (RBAC) and tenant isolation to ensure each school institution's data is partitioned and accessible only to authorized users.

Administrative access to production systems is restricted to authorized engineering personnel. Two-factor authentication (2FA) is supported for account access.

4. Data Backups & Recovery

Platform databases are backed up automatically on a daily schedule with point-in-time recovery capabilities.

We retain automated snapshots to safeguard against accidental data loss or administrative deletion.

5. Incident Response

In the event of a confirmed security incident, we have established procedures to contain the issue, conduct root-cause analysis, and notify affected school administrators promptly in accordance with applicable legal obligations.

6. Data Privacy & Compliance

HBA Compass is designed to align with the core principles of India's Digital Personal Data Protection Act, 2023 (DPDP Act), including data minimisation, purpose limitation, and user consent.

We do not sell, rent, or trade student or teacher personal data to third parties for commercial advertising or profiling purposes.

7. Contact Security Team

If you discover a potential security vulnerability in HBA Compass, please report it responsibly to support@hizvanabrain.ai. We take all reports seriously and will respond promptly.

For general security questions or concerns about how your school's data is handled, you can reach us at support@hizvanabrain.ai.