Last Updated: May 28, 2026
This Data Processing Addendum ("DPA") governs the processing of personal student records, attendance details, marks, and administrative data processed through the Schoolwala platform.
It integrates directly into the Schoolwala Terms of Service, satisfying the stringent legal requirements of student records safety and regulatory compliance.
In providing our school ERP system, the educational institution acts as the Data Controller (determining student and staff record parameters), and Schoolwala acts as the Data Processor, solely acting upon the direct instructions of the school.
We deploy robust safeguards to secure data. Every tenant schema is fully isolated. We encrypt all data in transit using TLS 1.3 and at rest with AES-256 keys managed via AWS Key Management Service (KMS).
We employ select infrastructure partners to process data: Amazon Web Services (AWS) for secure, localized data cloud hosting, and Razorpay for processing automated fee payments and instant settlements.
We assist the Data Controller in fulfilling requests from parents, students, and staff members regarding their right to access, rectify, or permanently delete personal records stored inside their isolated ERP schema.
In the highly unlikely event of a security incident, we follow strict logging protocols. We will notify the affected educational institution's primary administrator within 72 hours of a confirmed breach, providing mitigation audits.