Security

Data Security

How we protect your personal and academic data on the Alphea Innovation LMS platform.

TLS 1.3 Encrypted

All data in transit

AES-256 at Rest

Sensitive data storage

Role-Based Access

Strict permission model

OAuth 2.0 via Google

No passwords stored

Verifiable Certificates

Cryptographic codes

72-hr Breach Notice

Incident response SLA

Encryption

All data transmitted between your browser and our servers is encrypted using TLS 1.3. Sensitive data including passwords and payment details are encrypted at rest using AES-256. Your Google OAuth tokens are never stored on our servers.

Infrastructure Security

Our platform is hosted on Vercel's global edge network with automatic DDoS protection. Database servers are isolated in private VPCs with no direct public access. We use Neon Postgres with connection pooling and encrypted connections for all database operations.

Access Control

Access to student data is strictly role-based. Only superadmins and admins can view personally identifiable information. All admin actions including data exports are logged. Students can only access their own data. Admin approval is required before any student can access protected platform features.

Certificate Integrity

Every certificate issued through the Alphea Innovation LMS is assigned a unique cryptographic verification code. Certificates can be verified at lms.alpheainnovation.in/verify at any time. Tampering with certificate data is detectable and constitutes grounds for revocation.

Incident Response

In the event of a data breach or security incident, we will notify affected users within 72 hours in accordance with applicable data protection laws. We maintain incident logs and conduct regular security reviews. Please report any suspected vulnerabilities to info@alpheainnovation.in.

Your Data Rights

You have the right to access, correct, and request deletion of your personal data at any time. To exercise these rights, contact us at info@alpheainnovation.in. We will respond to verified requests within 30 days. Upon account deletion, your personally identifiable information will be permanently removed from our systems within 90 days.

Found a security vulnerability?

Report it responsibly to info@alpheainnovation.in