Role-based access
Owners, principals, teachers, accountants, parents and students each get their own workspace. Every page and every data request checks the caller's permission before answering.
Security principles for sensitive school data.
EduCore protects student, parent, academic and financial records through layered access, workspace isolation and auditability.
Isolated school workspaces
Each school's records live in its own workspace, enforced at the database layer — a request from one school cannot read or change another school's data.
Verified payments
Payment notifications from Paystack are accepted only when their cryptographic signature checks out. Forged callbacks are rejected.
Audit trail
Enrolment, results, invoices and payments write events to an audit log, so the school can always answer who changed what.
Report a concern
Found something that worries you? Write to the security contact and it will be handled privately — never post account or data issues publicly.