Version 1 · Last updated: 19 October 2026

In short

  • All connections are encrypted with HTTPS, and passwords are stored only as secure hashes.
  • Each Institution's data is kept separate, and inside an Institution every user sees only what their role allows.
  • Two-factor authentication, new-device verification, screen lock and session control are available to protect sign-ins.
  • Database backups are taken daily and encrypted. Card and UPI details never reach our servers.

Schools trust Vedmarg with records about children, parents and staff. This page describes the main safeguards we use to protect that data. It forms part of our Privacy Policy.

1. Encryption

  • All traffic between your browser or app and Vedmarg is encrypted with HTTPS (TLS). Plain HTTP requests are redirected to HTTPS.
  • Passwords are hashed with bcrypt before they are stored, so no one, including our team, can read them.
  • Database backups are encrypted with AES-256.

2. Protection against attacks

Our website and web panel are served through Cloudflare, which helps block denial-of-service attacks and other malicious traffic before it reaches our servers.

3. Separation between Institutions

Every record is tied to the account of the Institution it belongs to, and access is restricted to that Institution's users. A user of one Institution cannot see another Institution's data.

4. Access control inside your Institution

  • Institutions create roles and decide which modules and actions each role can use: view, add, edit or delete.
  • Teachers can be limited to the classes they teach.
  • Inactive staff are blocked from signing in.
  • Sensitive actions, such as viewing or ending active sessions, ask for the password again.

5. Sign-in protection

  • Two-factor authentication: an OTP sent to a verified security mobile number in addition to the password.
  • New device alert: sign-ins from an unrecognised browser can be verified with an OTP. A verified browser is remembered for 30 days.
  • Screen lock: after a period of inactivity, the web panel can lock behind a personal PIN.
  • Sessions: see where your account is signed in and sign out other devices remotely.
  • Session expiry: web sessions end when the browser is closed or after inactivity.
  • Rate limits: repeated failed sign-in and OTP attempts are slowed down to stop password guessing.

Signed-in users can manage these settings under Account Security in the profile menu of the web panel.

6. Activity logs

Vedmarg records which user created, changed or deleted important records, and when. It also keeps sign-in history (time, device and IP address).

Institutions can use this to review changes and investigate problems. Activity logs are kept for up to 180 days.

7. Files and documents

Uploaded files are stored in cloud object storage. Private documents are not publicly listed; they open through short-lived links that expire automatically.

8. Payment security

  • Card, UPI and net-banking details are entered on the payment gateway's page or app screen, and never reach our servers.
  • Before a fee is marked as paid, we confirm the payment status directly with the gateway, server to server.
  • Gateway secret keys are kept on our servers, not inside the mobile apps.

9. Backups and availability

The database is backed up every day and the backups are encrypted. We monitor server health so that problems are spotted early.

10. Security incidents

If we become aware of a personal data breach, we will act to contain and investigate it. We will inform affected Institutions and users, and the Data Protection Board of India, as required by the Digital Personal Data Protection Act, 2023 and its rules.

11. What you can do

Security is shared between us and each Institution. To keep your account safe:

  • Use a strong, unique password and turn on two-factor authentication.
  • Never share your password or OTP with anyone. Vedmarg staff will never ask for them.
  • Give each staff member only the permissions they need, and deactivate staff who leave.
  • Keep your security mobile number up to date.
  • Sign out on shared computers, and use the screen lock if available.

12. Report a security issue

If you believe you have found a security vulnerability, email [email protected] with the subject "Security issue". Include the details needed to reproduce it.

Please do not access, change or delete data that is not yours, and give us reasonable time to fix the issue before disclosing it.

13. Contact us

Menace Techdost Services Private Limited (Vedmarg)
86, Kapoor Complex, Opp. Tyagi Market, Garh Road, Meerut, Uttar Pradesh 250004, India
Email: [email protected] · Phone: +91-8923410020