Security

How EduSphere protects academic data, described by what is built into the product.

Tenant isolation

Every organization's records are separated by Postgres row-level security enforced in the database, not by hiding things in the interface.

Role-based access

• Students access only their own records.
• Faculty access students enrolled in courses they teach.
• Academic leaders, administrators and owners access organization data according to role.
• Assessment answer keys are stored separately and are unreadable to students.

AI handling

• The AI provider key lives only on the server.
• Prompts use reference tokens instead of names and identifiers, and include only the data an operation needs.
• Model output is validated against a schema before it is stored.
• Each AI run is logged with status and credits. Internal prompts are not exposed to users.

Credits and billing integrity

Credit balances can only be changed by server-side functions. Clients cannot edit them.

What we do not claim

EduSphere does not currently claim any compliance certification or audit. If and when verified certifications exist, they will be listed here.