Protecting student records, financial information, and family privacy is built into every layer of the Merphils architecture.
All communications with Merphils are encrypted using TLS 1.3. School database storage and user credentials are protected using industry-standard AES-256 encryption.
Strict data isolation ensures school owners, staff, teachers, parents, and students can only access records relevant to their specific authorization scope.
Authentication is built on Better Auth with HTTP-only secure cookie tokens, live session revocation, and active device monitoring.
School institution data is logically isolated in multi-tenant schemas, preventing data leakage across independent school networks.
Local offline data synced through PowerSync is cryptographically verified against server signatures to ensure integrity when coming back online.
Full compliance with global student data privacy regulations, featuring comprehensive audit logging for administrative actions.