Trust & security
Your school's data. Fenced, encrypted and yours.
Schools trust us with children's records and parents' phone numbers. Here is exactly how we protect them — in plain words, with nothing overstated.
How we protect it
Built in, not bolted on.
Each school's data kept apart
Every school is its own tenant. Separation is enforced by row-level security in the database — not by hiding things on screen.
Role-based access
Permissions resolve in context. A teacher scoped to Class 7 sees Class 7. Nobody can grant more access than they hold.
Encrypted
Data is encrypted in transit and at rest. Passwords are stored with a one-way hash — even we cannot read them.
Private document storage
Photographs and certificates live in private cloud storage, opened only through short-lived signed links.
Hosted in India
Microsoft Azure, India region.
Sign-in protection
SMS OTP verification, limits on repeated sign-in attempts, and browser security headers on every page.
AI boundaries
The AI reads through an approved, scoped query layer. It cannot reach another school's data, and it is read-only.
Audit trail
Approvals, access changes and record changes leave a trail you can review.
Your data is yours.
Your school owns its records. We process them only to run HeySchool AI for you, never sell them, and never use them to advertise to children or parents. How we handle personal data is set out in our Privacy Policy and Data Processing terms.
Found a security issue?
Please tell us privately at info@ornithoai.com before sharing it anywhere else. We read every report and will keep you updated while we fix it.
Questions
Frequently asked.
Do we have to move everything at once?
No. Most schools start with students, staff and fees, then bring exams and transport across in the following weeks. The import can be run again — it won't duplicate records.
We keep our old records on paper. Is that a problem?
No. Photograph the register and the AI reads the rows off it. You review everything in an editable preview before a single record is saved.
Will our teachers actually use it?
Teachers get their own workspace — schedule, attendance, homework, marks, syllabus. They never see an admin screen. Marking a class takes seconds.
Do parents need to install an app from the store?
No. HeySchool AI installs straight from the browser onto any phone and updates itself.
We're a group with several branches. Is that supported?
Yes — groups are a first-class setup, with one cockpit across every branch.
Is the AI reading our students' data? Where does it go?
The AI reads your school's records through an approved, scoped query layer, within the permissions of the person asking. It cannot reach another school's data.
Can the AI change our records?
No. It is read-only. Anything it generates — a question paper, an import, a plan — is reviewed by a person before it counts.
What if the AI gets a question paper wrong?
Every generated question cites the syllabus section it came from, and the teacher edits the paper before it's used. AI drafts; teachers decide.
How long does setup take?
Days, not months. Registration takes minutes; after that it depends on how much old data you bring across.
Who owns our data?
Your school does. We process it only to run the service for you, as set out in our Data Processing terms.
Ready to run your
school with AI?
Live in days · AI-assisted data import · No app store for parents