Platform Security & Architecture Statement

Details the multi-layered technical, cryptographic, and operational safeguards protecting institutional data across the Prismera Edu ecosystem.

Operating Entity: Azed Labs LTD (RC 9432305)•Registered Office: 6, Zoo Road, Kano, Nigeria•Effective Date: August 14, 2026•NDPA 2023 Compliant
Terms of ServicePrivacy PolicyCookie PolicyDPA for SchoolsSecurity StatementAcceptable Use

1. Multi-Tenant PostgreSQL Schema Isolation

Unlike legacy monolithic software that mixes multiple schools into a single shared database table, Prismera Edu is engineered with database schema-level isolation powered by django-tenants:

• Independent Database Schemas: Each subscribing school operates in a physically separated PostgreSQL database schema (e.g., schema_school_alpha).

• Dynamic Search Path Routing: Incoming web and API requests dynamically set the database search path strictly to that tenant's schema.

• Session Isolation: Middleware validates that the active user session matches the specific tenant schema, preventing cross-tenant data traversal.

2. Cryptographic Security & Password Hashing

Encryption in Transit

All web traffic and API endpoints strictly enforce TLS 1.3 / HTTPS with HTTP Strict Transport Security (HSTS) and modern cipher suites, eliminating man-in-the-middle risks.

Encryption at Rest & Passwords

Cloud PostgreSQL volumes are encrypted using AES-256. User passwords are cryptographically salted and hashed using PBKDF2-SHA256 with 600,000+ iterations.

3. AI Zero-Retention Architecture

Prismera Edu utilizes Google Gemini Flash APIs for timetable heuristics, lesson planning templates, and paper register OCR digitizing:

  • Zero Foundational Training: Integrations operate under enterprise commercial terms prohibiting Google from retaining or using customer data to train public AI models.
  • Data Sanitization: Executive Insights summarize strictly aggregated numerical metrics rather than individual student records.
  • Tier Quotas: API rate-limiting prevents resource exhaustion and abusive automated prompt scraping.

4. Payment Gateway Security

All tuition payments and platform subscriptions are processed directly through Paystack Payments Limited (PCI-DSS Level 1 certified).

Prismera does not capture or store raw card numbers, CVVs, or bank PINs on its application servers (operating strictly within the PCI-DSS SAQ-A compliance boundary). Webhooks are validated via HMAC-SHA512 digital signatures before invoices update.

5. Vulnerability Disclosure

If you discover a security vulnerability, please notify us responsibly at security@prismera.ng.