Security & Compliance

Enterprise-Grade Security
Built for Universities

ISO 27001:2022 certified platform with end-to-end encryption, role-based access control, and compliance with Indian data protection regulations.

Certified & Compliant

Industry-recognized certifications and adherence to regulatory frameworks

ISO 27001:2022

Information Security Management System

Certified•December 2024

Data Protection

DPDPA 2023 Compliant

Compliant•Ongoing

Campus Security

End-to-end encrypted communications

Active•Platform-wide

Security Architecture

Multi-layered security protecting every aspect of your campus data

Data Encryption

AES-256 encryption at rest, TLS 1.3 in transit

  • All student data encrypted in database
  • Secure HTTPS connections
  • Encrypted backup systems

Access Control

Role-based access with multi-factor authentication

  • Granular permission management
  • MFA for admin accounts
  • Session management and timeout

Infrastructure Security

Enterprise-grade cloud infrastructure

  • 99.9% uptime SLA
  • DDoS protection
  • Regular security audits

Privacy Controls

Student privacy at the core

  • Minimal data collection
  • Parent consent mechanisms
  • Data retention policies

Audit Trails

Complete activity logging and monitoring

  • Immutable audit logs
  • Real-time anomaly detection
  • Compliance reporting

Data Governance

Clear ownership and accountability

  • Data ownership with institution
  • Export capabilities
  • Deletion on request

Regulatory Compliance

Supporting your accreditation and regulatory reporting requirements

NAAC Compliance

Supports NAAC criteria for institutional governance and student support

Criterion II: Teaching-Learning
Criterion V: Student Support
Criterion VI: Governance

NBA Compliance

Facilitates NBA documentation and student outcome tracking

Student Performance
Infrastructure Records
Continuous Improvement

UGC Guidelines

Adheres to UGC guidelines for student welfare and campus management

Anti-Ragging
Student Grievance
Women Safety

NIRF Data

Streamlines NIRF reporting with automated data collection

Student Strength
Facilities
Perception Metrics

Data Protection & Privacy

Transparent data handling aligned with Digital Personal Data Protection Act 2023

What data we collect

  • Student identity and contact information
  • Hostel allocation and attendance records
  • Meal preferences and consumption patterns
  • Fee payment and financial transactions
  • Campus access and movement logs

How we protect it

  • Encrypted storage with regular backups
  • Access restricted to authorized personnel only
  • Regular security assessments and penetration testing
  • Incident response and breach notification protocols
  • Secure data centers in India

Your rights

  • Data portability - export your data anytime
  • Right to deletion upon contract termination
  • Transparency in data usage and processing
  • Control over parent and student access
  • Regular compliance and security reports
For Procurement Teams

Vendor Security Questionnaire — Ready to Download

Pre-filled with all 24 standard InfoSec questions covering encryption, access control, audit trails, data residency, and regulatory compliance.

Accepted by 55+ university procurement offices across India. No email required.

Opens print-ready questionnaire

Your Data. Your Campus. Your Control.

Unlike cloud-only solutions, FretBox can be deployed on-premise or in your preferred cloud region. You maintain complete ownership and control of all student and institutional data.

Ready for a Security Briefing?

Our security team can walk you through our architecture, certifications, and compliance measures.

55+ campuses running FretBox live right now