Indian Data Residency
All production data and backups are stored in Indian data centres. Nothing leaves the country.
Security & Trust
Student Data Deserves Better Than a Spreadsheet
Campus Flow hosts in India, encrypts everything, logs every action and builds DPDP consent into the product. Here is exactly what we do, and the documents to prove it.
Controls
What Protects Your Data
Encryption Everywhere
TLS 1.2 or higher in transit, AES-256 at rest, encrypted daily backups retained for 35 days.
Identity and Access
SAML and Google SSO, enforced MFA for admins, role and field-level permissions per campus.
Audit Logs
Every login, change and export is logged, searchable for 24 months and exportable to your SIEM.
Testing and Review
Annual third-party penetration tests, continuous vulnerability scanning and a responsible disclosure programme.
People and Process
Background-checked staff, least-privilege access, quarterly access reviews and security training for everyone.
Compliance
Built for the Digital Personal Data Protection Act
Consent capture, consent records, withdrawal, retention rules and grievance handling are features of the product, not paperwork you maintain beside it.
ISO 27001
aligned controls, certification in progress
DPDP
consent and rights built in
99.9%
uptime target, credits if missed
24 hrs
breach notification commitment
Documents
What We Can Share
Security questionnaires, architecture overview, penetration test summary and the Data Processing Addendum are available under NDA within two working days.
Security Overview
Architecture, hosting, encryption, access control and monitoring in 12 pages.
RequestPenetration Test Summary
Latest third-party test scope, findings and remediation status.
RequestData Processing Addendum
Our DPA, sub-processor list and retention schedule.
RequestPrivacy and Terms
The public documents governing use of the service.
ReadFAQs
Security Questions
Review Campus Flow With Your IT and Legal Teams
Book a technical walkthrough and we will share the security pack in advance so the session can go straight to your questions.