Security at Tutora
We understand that educational institutions trust us with their most critical assets—student data, intellectual property, and fee records. Security is engineered into every layer of our platform.
AES-256 & TLS 1.3 Encryption
All database stores, file attachments, and backups are encrypted at rest with AES-256. All web & API traffic uses TLS 1.3.
99.9% High Availability SLA
Multi-zone redundant cloud infrastructure with automated scaling, load balancing, and intelligent failover systems.
Automated Daily Backups
Geo-replicated point-in-time database snapshots guaranteeing rapid disaster recovery with zero student data loss.
Granular RBAC & MFA
Fine-grained permissions ensure strict separation between Super Admins, Teachers, Students, and Parents.
Data & Storage Security
- Encrypted database records with automated key rotation via AWS KMS / Cloud KMS.
- Strict tenant isolation ensuring institutes only access their own databases and files.
- Secure, time-limited presigned URLs for video lectures and exam answer sheets.
Network & Perimeter Defense
- Enterprise DDoS mitigation and Web Application Firewall (WAF).
- Automated rate-limiting on sensitive authentication and fee payment endpoints.
- Isolated VPC networking with zero direct public database exposure.
Identity & Access Control
- Cryptographic password hashing using salted Argon2 / bcrypt standards.
- Optional Multi-Factor Authentication (MFA) for administrative staff.
- Automated session invalidation upon credential changes or suspicious activity.
Compliance & Auditing
- Comprehensive audit logging for all administrative actions and fee adjustments.
- Built to align with FERPA, GDPR, and Indian DPDP Act standards.
- Regular automated vulnerability scanning and third-party penetration testing.
Disaster Recovery & Incident Response
Tutora maintains an active Business Continuity and Disaster Recovery (BCDR) plan. Database clusters are replicated continuously across multiple geographic availability zones. In the rare event of an infrastructure outage, automated failover redirects traffic to standby healthy instances within minutes.
Found a Security Vulnerability?
We welcome security researchers and ethical hackers who help keep Tutora and its community safe. If you believe you have discovered a potential security vulnerability in our platform, please report it immediately to our security response team.
Want to see our Privacy Policy?
Learn how we process and protect student & institutional data.