Platform Security & Encryption

Rigorous defense-in-depth across our cloud architecture: TLS 1.3 in-transit encryption, AES-256 database protection, Argon2id password hashing, and air-gapped gate verification.

DEFENSE-IN-DEPTH

Cryptographic Protection Layers

1. Data In-Transit (TLS 1.3)

All traffic between client devices, college intranet proxies, and cloud clusters is encrypted with TLS 1.3 and Perfect Forward Secrecy.

2. Data At-Rest (AES-256-GCM)

Student gradebooks, identity records, and biometric hashes are stored in encrypted volumes using unique per-tenant keys.

3. Password Hashing (Argon2id)

Passwords are protected by memory-hard Argon2id hashing algorithms, providing mathematical resistance against brute-force GPU attacks.

4. Offline HMAC Access (Pi-Scan)

Perimeter gates verify SHA-256 student passes offline without roundtrip database calls, guaranteeing immunity to DDoS disruptions.

Read the comprehensive mathematical proofs in our Security Whitepaper: Open Technical Whitepaper