East African hosting
Data is stored on servers located in East Africa, reducing latency and keeping data within the region.
AES-256 encryption
Data is encrypted at rest using AES-256 and in transit using TLS 1.3. Backups are separately encrypted.
30-day daily backups
Daily encrypted backups are retained for 30 days. Schools can request a full data export at any time.
1. What data we store
ShuleXtra stores the following categories of data: school configuration and settings, student and staff records, financial transactions, fee records and receipts, exam results and report cards, attendance records, and system activity logs.
2. Data storage location
All data is hosted on servers located in East Africa. We do not transfer data outside the region without explicit consent. Disaster recovery backups are replicated to a secondary location within East Africa.
3. Backup and recovery
Automated full backups are taken daily and retained for 30 calendar days. Point-in-time recovery is available within that window. In the event of data loss, recovery target time is under 4 hours.
4. Data access controls
Access to school data is role-based. School administrators control which staff members can access which modules. ShuleXtra engineering staff can access anonymised diagnostic data only, not student records, unless explicitly authorised for support purposes.
5. Data export & portability
Schools can export all their data at any time in CSV, Excel, and PDF formats from within the platform. A full database export can be requested by the school administrator by contacting support.
6. Data deletion
On account termination, all school data is retained for 30 days to allow for data export. After 30 days, all data is permanently and irrecoverably deleted from all systems including backups. This process is irreversible.