Privacy, security & administration
Roles, audit and masked data by default, with a privacy console for every request.
One institution with many schools, fourteen built-in roles plus custom roles, and modules you turn on or off. Sensitive values are masked by default, every change and sign-in is audited, and every user can download their data or ask for a correction or deletion. CampusTip is designed to support FERPA, COPPA and state laws in the US, and the DPDP Act and CERT-In Directions in India; it holds no certifications.
Who uses it
- District and school administrators
- Principal
- Privacy officer / DPO
- IT administrator
- Every user (their own data)
Privacy and security
From the narrated product tour: “Privacy and security”. Narrated, with captions. Sample data in the demo environment.
More screens
Screenshots from the app with sample data. Select one to enlarge it.
District dashboard. 1 / 4 · Sample data in the demo environment.
More clips
Short recordings from the app in the demo environment.
Administrator: dashboard and modules (narrated)
An administrator reviews the district dashboard tiles, attendance trend and live bus map, then opens the App center where modules are turned on or off. Narrated, with captions. Sample data in the demo environment.
Key capabilities
Administration and dashboards
- Multi-school. One district, trust or group with many schools or campuses, each with its own bell times and time zone.
- Roles and permissions. Fourteen built-in roles plus custom roles; every permission has a scope: institution-wide, their school or their own.
- Access matrix and View as role. See and export who can do what, and preview any role safely.
- App center. Turn modules on or off; dependencies are enforced and data is kept.
- Audit and sign-in history. Every staff change and every sign-in attempt, searchable.
- Dashboards. Attendance rates by school, assessment analytics, library circulation, food-service counts, fleet cost and compliance, billing and collections, and payroll reports.
Privacy self-service
- Data rights. Download, correction and deletion requests, with education and payroll records kept for their legal retention period.
- Masked by default. Sensitive values are masked; staff reveal them for 30 seconds with a reason that is logged.
Security controls
- Encryption. HTTPS (TLS) everywhere; field-level AES-256-GCM encryption of sensitive data such as face templates, health visits, special-education and counselling records and bank details, with key rotation; encrypted backups.
- Identity. SSO, MFA with passkeys, lockout, breached-password checks, session management and remote sign-out.
- Access control. Role-based permissions with school-level scopes; sensitive fields masked by default; reveals logged with a reason.
- Tenant isolation. Each institution's data is separated in the database with row-level security, and tested.
- Audit. Append-only audit and personal-data access logs kept seven years, with unusual-access alerts.
- Children's data. No advertising, no data sale, no third-party trackers or analytics SDKs; accounts created by the school only; push previews hidden for minors.
India and the United States
India
- Raise a grievance or nominate a person to act for you.
- A consent ledger per purpose with one-tap withdrawal, CERT-In 6-hour incident clock and a dedicated India-region deployment.
United States
- FERPA workflows (inspect-and-review, amendments, record of disclosures, directory opt-outs), COPPA school-authorized accounts and state student-privacy laws.
Related features
See CampusTip with your own roles
A guided demo on a sample district or institution, tailored to the modules you care about. A live demo environment is available on request.