Skip to content
Arkantara

School data security and access control

School data security in Arkantara starts with separation: every school has its own database schema, and access is denied unless the user's role and the school's plan allow it. The privacy policy follows Indonesia's Personal Data Protection Law, and school data is never sold or used for advertising.

Included in every package

Request a demo All features

What you can do

  • Each school's data kept apart

    Every school uses its own PostgreSQL schema, and its files are stored in a separate space per school. One account can sign in to one school only.

  • Role-based user permissions

    Built-in admin, teacher, staff, student, and guardian roles can be joined by custom school roles. Admins can grant only permissions they hold, and modules outside the plan stay closed.

  • Two-step verification and passkeys

    Users can turn on authenticator codes with recovery codes, or sign in without a password using a passkey with fingerprint, face, or device PIN.

  • An audit log that cannot be edited

    Important changes are recorded with who made them, when, and the data before and after. Audit entries cannot be changed or deleted, except by the retention job.

  • Protected sign-in and sessions

    Sign-in attempts are rate-limited and protected by an anti-bot check. Users can sign out other devices, and high-privilege accounts sign out automatically after inactivity.

  • HTTPS and private files

    Every connection uses HTTPS. Files download only after a permission check, through a short-lived link, and photo location metadata is removed on upload.

Frequently asked questions

Can another school see our data?

No. Each school's data lives in its own database schema, files are stored separately per school, and sign-in sessions are bound to the school's address. An account at one school cannot switch to another.

Can the Arkantara team sign in as a school user?

For support, a platform operator can act as a school user after confirming their password and giving a reason, for at most 30 minutes, with a visible banner. The start, the end, and every change made during that session are recorded in the audit log.

Can the school take all of its data out?

Yes. A school admin can export all school data as one ZIP file with a CSV per table and the uploaded files, without password hashes, payment credentials, or private messages. The file is available for seven days, and every download is recorded.

Related features

See your school in it

A 14-day trial with every module, with nothing to install at the school. Pricing is per school, not per student.

Request a demo