Security & Compliance

Institutions trust The Academix with student records, course content, and assessment data. Here’s how the platform is built to protect it — from cloud infrastructure to role-based access to the legal commitments behind it.

Built on Enterprise Cloud Infrastructure

The Academix’s application servers and MySQL database run on DigitalOcean in Bengaluru, India, using DigitalOcean’s managed database service. Uploaded files and course videos are stored on Cloudflare R2 and delivered through Cloudflare’s content delivery network, and a backup copy of uploaded files is kept on Amazon S3. Videos are processed on AWS Lambda into encrypted adaptive (HLS) streams: a lecture plays as short encrypted segments, and the key to play them is issued only to signed-in students enrolled in that course. This is not DRM — a determined user can still record their screen. The institute and student web apps are hosted on Cloudflare Pages, and the parent portal on Amazon CloudFront.

We don’t publish a specific uptime SLA number here — what we can say plainly is that the database, file storage and content delivery are managed cloud services rather than machines we run ourselves, and continuous integration and deployment pipelines ship features and security patches on an ongoing basis rather than in infrequent, risky batches.

Layers of Security

Security is treated as a foundation, not an add-on — applied across the platform in several layers.

Data Encryption

Industry-standard encryption protocols protect data both at rest and in transit, safeguarding institutional and learner information against unauthorized access.

Session-Based Access Control

Secure session management ensures every user — admin, staff, tutor, or student — can only reach the data and functionality relevant to their role.

Cloud Infrastructure Security

The application and database run on DigitalOcean in Bengaluru, India, with every database connection encrypted. Our web apps and file and video delivery run on Cloudflare's network, which adds DDoS mitigation.

Regular Security Audits

Periodic security audits and assessments identify and remediate potential vulnerabilities, reinforcing the platform's defenses against emerging threats.

Role-Based Access Control

Every institute on The Academix can define custom roles for Admins, Staff, and Tutors, each scoped to exactly the data and actions they need — see, add, edit, or delete permissions can be set per role, per branch. This keeps sensitive institutional data visible only to the people who should see it.

See how role-based permissions work

Backup & Data Recovery

Records live in a managed MySQL database on DigitalOcean, which keeps automated backups. Course content and other uploaded files live on Cloudflare R2, with a second copy kept on Amazon S3 (a different provider), so a file isn’t dependent on any single storage service.

Part of India’s Startup Ecosystem

The Academix is built by Vandana Academix Private Limited, whose product documentation has been filed with India’s DPIIT (Department for Promotion of Industry and Internal Trade) as part of the Startup India initiative. The platform is built to align with the Government of India’s Digital India and Skill India missions — helping educational institutions own their digital future.

The Legal Details

The commitments above are backed by the following agreements.

Data Processing Agreement

Our DPA sets out how The Academix processes personal data on your institution's behalf, including sub-processors and data subject rights.

Privacy Policy

Details on what data we collect, how it's used and shared, and the privacy rights available to institutions and learners on the platform.

Have Security Questions Before You Switch?

Talk to our team about how The Academix protects your institution's data — we're happy to walk through it in detail.