Request free trial
Security & Data Ownership

Your students' data is entrusted to you — our architecture is built to honor that.

An academy holds more than names and phone numbers — it safeguards parent identity records, financial history, and student health declarations. Academision builds the following safeguards right into its core.

Hosted on your own server — your data stays yours

Unlike multi-tenant SaaS tools where hundreds of schools share a single cloud database, your system runs on your own dedicated server. Student, parent, and financial data remains strictly under your control.

Encrypted sensitive fields

National ID numbers, blood types, and medical notes are encrypted at rest in the database. Even direct database access cannot read these fields in plain text.

Dynamic role & permission architecture

Create unlimited custom roles. Decide with granular precision which front-desk staff, instructor, branch manager, or accountant can view or edit each branch, screen, and financial metric.

Versioned digital consent proof

Parents approve enrollment contracts and privacy disclosures directly from their phones. Every approval records the exact document version and timestamp.

Comprehensive audit trail

Who changed what and when: every payment, enrollment, and permission change is permanently logged in the audit history.

Protected on mobile devices

Session tokens are stored in the device's secure enclave/keychain. Offline attendance taken in the field waits in encrypted local storage until synced.

Brute-force rate limiting

Login and public registration endpoints enforce strict rate limits to block automated credential-stuffing and spam attacks.

KVKK & GDPR

Who owns and processes the data?

The institution operating the platform is the sole Data Controller of all student, parent, and staff records. MageSheet, the software studio behind Academision, acts strictly as the technical provider under the institution's instructions — your data is never shared, pooled, or monetized.

Before launch, server hosting, automated backup schedules, and role-based access policies are configured together with your institution and documented in writing.

Have a security questionnaire from your IT team? Send it to us and we will reply in writing. For website privacy details, see our privacy page.