Security and privacy
Roles, two-step sign-in, audit logs and your data.
Roles and permissions
Every action is checked on the server against the person’s role — hiding a button is never the only protection. Teachers see only their own batches; parents see only their own children.
Two-step sign-in
Under Settings → Two-step sign-in, require a code from an authenticator app (Google Authenticator, Microsoft Authenticator, Authy) for the owner, or for owner, staff and teachers. Students and parents are never asked. Save the recovery codes when they are shown.
Audit log
Billing, role, password and status changes are recorded with who did them and when.
Download or delete your data
Only the owner can open Data & privacy to download everything as one file (passwords and keys are never included), or close the institute. A closed institute is kept for 30 days and can be restored on request; after that it is erased.
Backups and history
eCampuz keeps encrypted backups. Attendance older than three years is moved to an archive so the live system stays fast; nothing is deleted.