Infy LMS.svg){kind=small}
Infy Assess
Infy Interview.svg){kind=small}
Infy Resume
Infy RecruitYou are accountable for student data. We help you prove it.
Learner data is stored and processed in India, encrypted throughout, and visible only to the roles you grant. The platform is independently penetration tested and assessed against the standards your IT and legal teams already work to.
Certified, compliant and independently tested.
ISO/IEC 27001:2022 certified, compliant with India’s DPDP Act 2023 and with GDPR, and penetration tested by an independent firm on a fixed cycle.
The standard procurement asks for by name.
CertifiedConsent-based collection, encrypted storage, documented retention.
CompliantData subject rights, lawful basis and transfer rules, handled.
CompliantFindings closed and re-tested, not filed.
Fixed cycleNo production database sits outside the country.
In transit and at rest, with keys we can account for.
Every person sees what their role allows. Every change is written down.
Taken daily and restored on a schedule, because an untested backup is a hope.
SAML or Google Workspace, so access is revoked where you already revoke it.
Records, scores and reports exportable at any time, including at exit.
What an institution is accountable for under DPDPA.
The Digital Personal Data Protection Act puts the institution in charge of student data. This is how the responsibilities split between you and us.
- 01
You remain the data fiduciary. We process on your instructions.
- 02
Consent and notice stay with the institution; we give you the records to evidence them.
- 03
Data export at any time, including at the end of a contract.
- 04
Deletion on request, with a documented retention schedule.
- 05
A named contact for data-protection questions.
Common questions.
What IT and legal teams ask before they sign off.
Where exactly is our data stored?
In India. No production database sits outside the country.
Can we see your security documentation before signing?
Yes. The security brief and the completed questionnaire go out on request, before commercial discussion rather than after.
What happens to our data if we stop?
It is yours. Student records, scores and reports export in full, and are deleted on a documented schedule afterwards.
Do students' recordings get used to train models?
This is the question every IT team asks and it deserves a precise answer rather than a reassuring one. Ask us directly and we will put the answer in writing as part of the contract.
Who can see a student's data inside our institution?
Only the roles you grant. The career team sees the batch, leadership sees programme-level figures, faculty see their own sections, and a student sees only their own record.
Send us your security questionnaire.
We would rather answer it before you evaluate the product than after.
- A 30-minute call, no deck. We ask what you are trying to fix, not what you want to buy.
- A demo tenant with your own programme in it. Your terms, your batches, your structure. Not a slide deck.
- A written plan, and a number to hold us to. What we would do first, and what it should move.