Security & Compliance

Your School Data is Protected

EBingwa uses bank-grade encryption, automated backups, and comprehensive access controls to keep your school's data safe. Built specifically for Kenyan primary and secondary schools.

Data Protection

We take data protection seriously. Your school's information is encrypted, backed up, and never shared with third parties.

Encryption in Transit & at Rest

All data transmitted between your devices and EBingwa servers is encrypted using TLS 1.3. Data stored in our databases is encrypted at rest using AES-256 encryption—the same standard used by banks and financial institutions.

  • TLS 1.3 encryption for all connections
  • AES-256 encryption for stored data
  • Secure API endpoints with authentication
  • Regular security audits and penetration testing

Automated Backups

Your school's data is automatically backed up multiple times per day. Backups are stored in geographically distributed locations to ensure data availability even in case of regional outages.

  • Multiple daily automated backups
  • Geographically distributed backup storage
  • Point-in-time recovery available
  • 30-day backup retention period

Role-Based Access Control

Control exactly who can see and modify what information. Assign roles (Principal, Bursar, Teacher, Guardian) with granular permissions. Every action is logged in an audit trail.

  • Granular permission system
  • Pre-defined roles (Principal, Bursar, Teacher, Guardian)
  • Custom role creation available
  • Complete audit trail of all actions

Password Policies

Strong password requirements and optional two-factor authentication (2FA) keep accounts secure. Passwords are hashed using bcrypt and never stored in plain text.

  • Minimum 8 characters required
  • Password complexity requirements
  • Optional two-factor authentication (2FA)
  • Secure password reset via email

Compliance & Privacy

EBingwa complies with data protection regulations and respects your school's privacy.

Data Ownership

You own your data. You can export all your school's information at any time in standard formats (CSV, Excel, PDF). We never sell or monetize your data.

Privacy First

EBingwa staff only access your data when you explicitly request support. All access is logged and audited. We maintain strict confidentiality agreements with all team members.

Have Security Questions?

We're transparent about our security practices. If you have specific questions about data protection, backups, or compliance, we're happy to discuss them.