Security and data protection
How your school’s records are kept safe
Student names, parents’ phone numbers, CNICs and fee records are the most sensitive things a school holds. This is how the system protects them — stated plainly, and only what is true of the running system.
-
Each school is kept separate
Every school has its own address — yourschool.vxschools.com — and its records are scoped to that school throughout the system, not filtered at the edges. A query cannot return another school’s data.
-
People see what their role needs
The school decides who holds which role. A teacher marks attendance and enters marks but does not see fees; fees are for the owner, the admin and the accountant. A parent sees only their own children.
-
Encrypted in transit, everywhere
Every page and every request goes over HTTPS. Plain HTTP is redirected, and browsers are told to use HTTPS only, for every school’s address.
-
Passwords nobody can read
Passwords are stored only as one-way hashes, so nobody — including us — can read one. Repeated wrong guesses at the sign-in page are slowed down automatically.
-
A record of who changed what
Changes that matter are written to an audit log with who made them and when. A payment or an expense that is reversed keeps its record rather than disappearing.
-
Backed up every night
The database and every uploaded file are backed up each night at 1 a.m. Pakistan time, and the last fourteen nights are kept. Restoring from them has been tested.
Who at Vortix Soft can see your data
VX Schools is built and run by Vortix Soft in Islamabad. The console our team uses to run the platform manages each school’s account, plan and modules. It has no screen for a school’s students, fees or marks.
The engineers who maintain the server can reach the database, as anyone running a server can. We do so only to fix a problem you have reported, to keep the system running, or to restore a backup — never to look through a school’s records for any other reason.
A school’s records belong to the school. Changing plan deletes nothing you have entered.
A question about how your data is handled?
Ask us directly — a person who works on the system will answer.