Encryption in transit and at rest
All traffic runs over TLS/HTTPS. Sensitive fields are encrypted in the database, and encrypted backups are taken regularly.
Security
Your data, protected to the highest standard
Student information is a trust — here is how we honour it.
Role-based access control
Every user sees only what their role allows — teachers their own classes, accountants the finance side, parents only their own children. Enforced at the database level (RLS).
One branch's staff can never see another branch's data — the same rule across multi-branch setups.
Financial integrity
Fee collection is recorded in a double-entry ledger; payment gateways (bKash/Nagad) connect directly to the gateway — card/PIN data never touches our servers.
You own your data
Export as Excel/PDF anytime. When you end the service, you get the chance to export before deletion. We never sell data.
Found a vulnerability? Report it: hello@iilmaa.com — we're grateful for responsible disclosure.