Enterprise Security for School Data

Protecting student records, financial information, and family privacy is built into every layer of the Merphils architecture.

Data Encryption in Transit & at Rest

All communications with Merphils are encrypted using TLS 1.3. School database storage and user credentials are protected using industry-standard AES-256 encryption.

Role-Based Access Control (RBAC)

Strict data isolation ensures school owners, staff, teachers, parents, and students can only access records relevant to their specific authorization scope.

Session & Token Security

Authentication is built on Better Auth with HTTP-only secure cookie tokens, live session revocation, and active device monitoring.

Isolated School Multi-Tenancy

School institution data is logically isolated in multi-tenant schemas, preventing data leakage across independent school networks.

Offline Sync Verification

Local offline data synced through PowerSync is cryptographically verified against server signatures to ensure integrity when coming back online.

Privacy Compliance & Audit Logs

Full compliance with global student data privacy regulations, featuring comprehensive audit logging for administrative actions.